KLA10340 Multiple vulnerabilities in Splunk

Multiple serious vulnerabilities have been found in Splunk. Malicious users can exploit these vulnerabilities to inject arbitrary script or read local files. Below is a complete list of vulnerabilities

1. An XSS vulnerability can be exploited remotely via specially designed HTPP headers;
2. A directory traversal vulnerability can be exploited via a specially designed URI.

Original advisories

Splunk changelog

Related products

Splunk

CVE list

CVE-2014-5198 warning

CVE-2014-5197 warning

Solution

Update to latest version

Impacts

• CI

Code injection. Exploitation of vulnerabilities with this impact can lead to changes in target code.

• RLF

Read Local Files. Exploitation of vulnerabilities with this impact can lead to reading some inaccessible files. Files that can be read depends on conсrete program errors.

Affected Products

• Splunk Enterprise 6.1 versions 6.1.2 and earlier