PRIOn knowledge basePRION:CVE-2011-4643

HistoryJan 03, 2012 - 11:55 a.m.

Directory traversal

2012-01-0311:55:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

77.9%

JSON

Multiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote authenticated users to read arbitrary files via a … (dot dot) in a URI to (1) Splunk Web or (2) the Splunkd HTTP Server, aka SPL-45243.

CPENameOperatorVersion
splunkeq4.0.4
splunkeq4.0.6
splunkeq4.1.2
splunkeq4.1.1
splunkeq4.2.3
splunkeq4.0
splunkeq4.2.2
splunkeq4.0.3
splunkeq4.1.8
splunkeq4.1.3

Name	Operator	Version
splunk	eq	4.0.4
splunk	eq	4.0.6
splunk	eq	4.1.2
splunk	eq	4.1.1
splunk	eq	4.2.3
splunk	eq	4.0
splunk	eq	4.2.2
splunk	eq	4.0.3
splunk	eq	4.1.8
splunk	eq	4.1.3

Rows per page:

1-10 of 261

References

secunia.com/advisories/47232

www.sec-1.com/blog/?p=233

www.sec-1.com/blog/wp-content/uploads/2011/12/Attacking_Splunk_Release.pdf

www.securitytracker.com/id?1026451

www.splunk.com/view/SP-CAAAGMM

exchange.xforce.ibmcloud.com/vulnerabilities/72244

www.exploit-db.com/exploits/18245/