CVE-2023-40598

Summary

CVE-2023-40598 is a vulnerability affecting Splunk Enterprise versions below 8.2.12, 9.0.6, and 9.1.1. An attacker can exploit this issue by creating an external lookup that triggers a legacy internal function. This function allows the insertion of code into the Splunk platform installation directory, which can then be executed by a user on the Splunk platform instance, leading to arbitrary code execution.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.