The vulnerability in the Splunk Web interface of the Splunk Enterprise operating system’s operational analysis platform allows a perpetrator to execute arbitrary code and gain increased privileges.

🗓️ 07 Sep 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

A flaw in Splunk Web interface initializes resources incorrectly when processing Open SSL directory, allowing arbitrary code execution and privilege escalation.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2023-40596	30 Aug 202320:12	–	circl
CNNVD	Splunk 代码问题漏洞	30 Aug 202300:00	–	cnnvd
CVE	CVE-2023-40596	30 Aug 202316:19	–	cve
Cvelist	CVE-2023-40596 Splunk Enterprise on Windows Privilege Escalation due to Insecure OPENSSLDIR Build Definition Reference in DLL	30 Aug 202316:19	–	cvelist
EUVD	EUVD-2023-45154	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Splunk Enterprise	31 Aug 202300:00	–	ncsc
NVD	CVE-2023-40596	30 Aug 202317:15	–	nvd
OSV	CVE-2023-40596	30 Aug 202317:15	–	osv
Prion	Design/Logic Flaw	30 Aug 202317:15	–	prion
Positive Technologies	PT-2023-4799 · Splunk · Splunk Enterprise	16 Aug 202300:00	–	ptsecurity

Vulners

Node

splunk splunk_enterpriseRange8.2.0–8.2.12

OR

splunk splunk_enterpriseRange9.0.0–9.0.6

OR

splunk splunk_enterpriseMatch9.1.0

Source	Link
vuldb	www.vuldb.com/ru/
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2023090417
advisory	www.advisory.splunk.com/advisories/SVD-2023-0805
web	www.web.nvd.nist.gov/view/vuln/detail

07 Sep 2023 00:00Current

8High risk

Vulners AI Score8

CVSS 26

CVSS 37

EPSS0.00156

Splunk Web interface Splunk Enterprise operational analysis platform Open SSL directory arbitrary code execution privilege escalation