Medium severity6.4NVD Advisory· Published Jan 7, 2025· Updated Apr 15, 2026
CVE-2025-22621
CVE-2025-22621
Description
In versions 1.0.67 and lower of the Splunk App for SOAR, the Splunk documentation for that app recommended adding the admin_all_objects capability to the splunk_app_soar role. This addition could lead to improper access control for a low-privileged user that does not hold the "admin" Splunk roles.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.