Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2023-40593

Denial of Service (DoS) in Splunk Enterprise Using a Malformed SAML Request

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Splunk

Description

In Splunk Enterprise versions lower than 9.0.6 and 8.2.12, a malicious actor can send a malformed security assertion markup language (SAML) request to the `/saml/acs` REST endpoint which can cause a denial of service through a crash or hang of the Splunk daemon.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Splunk Splunk Enterprise

  • 8.2 to < 8.2.12affected
  • 9.0 to < 9.0.6affected

Splunk Splunk Cloud

  • - to < 9.0.2205affected

References