Session fixation

2010-09-1417:00:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.8%

JSON

Splunk 4.0.0 through 4.1.4 allows remote attackers to conduct session hijacking attacks and obtain the splunkd session key via vectors related to the SPLUNKD_SESSION_KEY parameter.

CPENameOperatorVersion
splunkeq4.0.4
splunkeq4.0.6
splunkeq4.1.2
splunkeq4.1.1
splunkeq4.0
splunkeq4.0.3
splunkeq4.1.3
splunkeq4.0.8
splunkeq4.0.5
splunkeq4.0.9