Lucene search
HistorySep 14, 2010 - 5:00 p.m.
CVE-2010-3323
4.6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:S/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
55.8%
Splunk 4.0.0 through 4.1.4 allows remote attackers to conduct session hijacking attacks and obtain the splunkd session key via vectors related to the SPLUNKD_SESSION_KEY parameter.
Affected configurations
Node
splunksplunkMatch4.0
ORsplunksplunkMatch4.0.1
ORsplunksplunkMatch4.0.2
ORsplunksplunkMatch4.0.3
ORsplunksplunkMatch4.0.4
ORsplunksplunkMatch4.0.5
ORsplunksplunkMatch4.0.6
ORsplunksplunkMatch4.0.7
ORsplunksplunkMatch4.0.8
ORsplunksplunkMatch4.0.9
ORsplunksplunkMatch4.0.10
ORsplunksplunkMatch4.0.11
ORsplunksplunkMatch4.1
ORsplunksplunkMatch4.1.1
ORsplunksplunkMatch4.1.2
ORsplunksplunkMatch4.1.3
ORsplunksplunkMatch4.1.4
References
Related
cve
cve
CVE-2010-3323
2022-10-03 16:20:56
prion
prion
Session fixation
2010-09-14 17:00:00
cvelist
cvelist
CVE-2010-3323
2022-10-03 16:20:56
openvas
openvas
Splunk 4.0.0 - 4.1.4 Multiple Vulnerabilities
2010-09-21 00:00:00
Splunk Multiple vulnerabilities
2010-09-21 00:00:00
4.6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:S/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
55.8%
Related for NVD:CVE-2010-3323