1. Home
  2. CVE Database
  3. CVE-2013-7394
HIGH · 9.0

CVE-2013-7394

The "runshellscript echo.sh" script in Splunk before 5.0.5 allows remote authenticated users to execute arbitrary commands via a crafted string. NOTE: this issue was SPLIT from CVE-2013-6771 per ADT2...

Vulnerability Description

The "runshellscript echo.sh" script in Splunk before 5.0.5 allows remote authenticated users to execute arbitrary commands via a crafted string. NOTE: this issue was SPLIT from CVE-2013-6771 per ADT2 due to different vulnerability types.

CVSS Score

9.0

HIGH

AV:N/AC:L/Au:S/C:C/I:C/A:C
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
SplunkSplunk<= 5.0.4

Related Weaknesses (CWE)

CWE-94

References

FAQ

What is CVE-2013-7394?

CVE-2013-7394 is a vulnerability with a CVSS score of 9.0 (HIGH). The "runshellscript echo.sh" script in Splunk before 5.0.5 allows remote authenticated users to execute arbitrary commands via a crafted string. NOTE: this issue was SPLIT from CVE-2013-6771 per ADT2...

How severe is CVE-2013-7394?

CVE-2013-7394 has been rated HIGH with a CVSS base score of 9.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-7394?

Check the references section above for vendor advisories and patch information. Affected products include: Splunk Splunk.