high7.8
CVE-2023-40597
In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can exploit an absolute path traversal to execute arbitrary code that is located…
Impact
In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can exploit an absolute path traversal to execute arbitrary code that is located on a separate disk.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Splunk | Splunk | from 8.2.0 before 8.2.12 from 9.0.0 before 9.0.6 Version 9.1.0 |
| Splunk | Splunk Cloud Platform | through 9.0.2305.100 |