2.7Baja
Incorrect Permission Assignment through Safe Mode in FireAMP for Splunk SOAR
Splunk FireAMP
In FireAMP versions below 2.1.15, a user who holds a role that can edit, create, or run playbooks in Splunk SOAR could run the add listitem action in a Safe Mode playbook while that action is listed as read-only, which could allow for unauthorized changes to …