CVE-2023-40597: Absolute Path Traversal in Splunk Enterprise Using runshellscript.py
Published Aug 30, 2023
·Updated
In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can exploit an absolute path traversal to execute arbitrary code that is located on a separate disk.
Affected Software
4 affected components
Splunk splunk>=8.2.0<8.2.12
Splunk splunk>=9.0.0<9.0.6
Splunk splunk=9.1.0
Splunk Splunk Cloud Platform<=9.0.2305.100
Event History
Aug 30, 2023
CVE Published
04:19 PM
Data Sourced
04:19 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-40597?
The severity of CVE-2023-40597 is high with a severity value of 8.8.
2
Which versions of Splunk Enterprise are affected by CVE-2023-40597?
Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1 are affected by CVE-2023-40597.
3
Can an attacker execute arbitrary code with CVE-2023-40597?
Yes, an attacker can exploit CVE-2023-40597 to execute arbitrary code located on a separate disk.
4
Is Splunk Cloud Platform affected by CVE-2023-40597?
Yes, Splunk Cloud Platform up to version 9.0.2305.100 is affected by CVE-2023-40597.
5
How can I fix CVE-2023-40597?
To fix CVE-2023-40597, you should upgrade your Splunk Enterprise to version 8.2.12, 9.0.6, or 9.1.1, or upgrade Splunk Cloud Platform to a version higher than 9.0.2305.100.