Absolute Path Traversal in Splunk Enterprise Using runshellscript.py

CVE-2023-40597

Summary

In specific versions of Splunk Enterprise, an absolute path traversal vulnerability allows attackers to exploit the system by executing arbitrary code stored on a separate disk. This flaw can pose significant security risks, enabling unauthorized access and manipulation of sensitive data. Organizations utilizing affected versions should prioritize applying the latest updates to mitigate this vulnerability and protect their systems.

References