CVE-2025-20298
Incorrect permission assignment on Universal Forwarder for Windows during new installation or upgrade
Severity
High 8
CVSS 3.1
Exploited
Not listed
EPSS
0.003
21.9th percentile
Discovered by
Not disclosed
Published
Jun 2, 2025
Assigned by cisco
Description
In Universal Forwarder for Windows versions below 9.4.2, 9.3.4, 9.2.6, and 9.1.9, a new installation of or an upgrade to an affected version can result in incorrect permissions assignment in the Universal Forwarder for Windows Installation directory (by default, C:\Program Files\SplunkUniversalForwarder). This lets non-administrator users on the machine access the directory and all its contents.
Weakness: CWE-732
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Splunk Universal Forwarder | SIEM & Log Management | cna-assigner |
Vendor-reported products (1)
- Splunk · Splunk/UniversalForwarder for Windows