Improper access control within Splunk SOAR allows an attacker to bypass established permissions and gain unauthorized access to sensitive data or system functionalities. The weakness, categorized as CWE-284, directly undermines the integrity of the authorization mechanism, potentially enabling privilege escalation or the exploitation of confidential information. As a result, any user or process able to interact with the affected component can perform actions beyond their intended scope. The CVSS score of 9.8 signals a critical flaw with severe impact on confidentiality, integrity, and availability.

The issue affects Splunk’s SOAR platform. While specific vulnerable releases are not listed, Splunk recommends upgrading to version 8.7.0 or later to remediate the flaw. No alternative work‑arounds have been published.

The EPSS score is <1% and the vulnerability is not listed in the CISA KEV catalog, indicating a low current exploitation probability but still a critical flaw. The CVSS score of 9.8 denotes a high severity category. Improper access control inherently carries a high potential for misuse. The risk includes unauthorized data disclosure, modification of configurations, or elevated access rights. Mitigation requires immediate application of the vendor fix as this is the only known preventive measure.