CVE-2023-40597

high

Description

In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can exploit an absolute path traversal to execute arbitrary code that is located on a separate disk.

References

https://research.splunk.com/application/356bd3fe-f59b-4f64-baa1-51495411b7ad/

https://advisory.splunk.com/advisories/SVD-2023-0806

Details

Source: Mitre, NVD

Published: 2023-08-30

Updated: 2024-04-10

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

Severity: Medium

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Severity: High

Detections

Analytics