CVE-2025-20387 - Incorrect permissions assignment on Splunk Universal Forwarder for Windows durin...

CVE ID : CVE-2025-20387 Published : Dec. 3, 2025, 5:15 p.m. | 1 hour, 14 minutes ago Description : In Splunk Universal Forwarder for Windows versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, a new installation of or an upgrade to an affected version can result in incorrect permissions assignment in the Universal Forwarder for Windows Installation directory. This lets non-administrator users on the machine access the directory and all its contents. Severity: 8.0 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor