CVE-2010-3323

2022-10-0316:20:56

mitre

www.cve.org

splunk

session hijacking

vulnerability

4.0.0

4.1.4

8.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.8%

JSON

Splunk 4.0.0 through 4.1.4 allows remote attackers to conduct session hijacking attacks and obtain the splunkd session key via vectors related to the SPLUNKD_SESSION_KEY parameter.

References

www.splunk.com/view/SP-CAAAFQ6