CVE-2023-40596 - CVE House
Back to Database
Status published High CVE-2023-40596

Splunk Enterprise on Windows Privilege Escalation due to Insecure OPENSSLDIR Build Definition Reference in DLL

Vulnerability Description

In Splunk Enterprise versions earlier than 8.2.12, 9.0.6, and 9.1.1, a dynamic link library (DLL) that ships with Splunk Enterprise references an insecure path for the OPENSSLDIR build definition. An attacker can abuse this reference and subsequently install malicious code to achieve privilege escalation on the Windows machine.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-40596

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Will Dormann, Vul Labs

References

More from Splunk

View All →
CVE-2025-22621
Privilege escalation for users who hold the “splunk_app_soar“ role in the Splunk App for SOAR
Medium 6.4
CVE-2025-20389
Improper Input Validation in "label" column field in Splunk Secure Gateway App
Medium 4.3
CVE-2025-20388
Blind Server Side Request Forgery (SSRF) through Distributed Search Peers in Splunk Enterprise
Low 2.7
CVE-2025-20387
Incorrect permissions assignment on Splunk Universal Forwarder for Windows during new installation or upgrade
High 8
CVE-2025-20386
Incorrect permission assignment on Splunk Enterprise for Windows during new installation or upgrade
High 8

Affected Vendor

Affected Software

Splunk Enterprise
Vulnerable Versions:
8.2, 9.0, 9.1

Timeline

Official Publish: August 30th, 2023
Last Modified: February 28th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-665

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.