Vulnerability report SPL-144192 seems to have contradicting data in it. It begins by talking about being vulnerable to this specific thing when running init or control scripts as a root user, but later in the report it mentions some specific conditions you must meet to be vulnerable, the first being run init scripts as non-root user.
Soooo...which is it?
How do I know if I'm vulnerable with such contradictory information?
I don't have enough karma points to post links apparently, even to splunks own web servers, but Ive attempted below to post a link in case it lets me...
splunk.com/view/SP-CAAAP3M#MitigationandUpgrades
... View more