CVE-2010-2504

2010-06-2818:06:00

mitre

www.cve.org

splunk

http header injection

sensitive information

AI Score

5.8

Confidence

Low

EPSS

0.001

Percentile

49.0%

JSON

Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allows remote authenticated users to obtain sensitive information via HTTP header injection, aka SPL-31066.

References

www.splunk.com/view/SP-CAAAFGD