← back
CVE-2023-40597

Absolute Path Traversal in Splunk Enterprise Using runshellscript.py

CVSS 7.8 HIGHEPSS 0.2%CWE-36
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.8EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
30 Aug 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can exploit an absolute path traversal to execute arbitrary code that is located on a separate disk.
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
Splunk · Splunk CloudSplunk · Splunk Enterprise

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://advisory.splunk.com/advisories/SVD-2023-0806https://research.splunk.com/application/356bd3fe-f59b-4f64-baa1-51495411b7ad/