EUVD-2010-3321

Malware in sbrugna...

CVE-2010-3323: Undefined Security Weakness

Splunk 4.0.0 through 4.1.4 allows remote attackers to conduct session hijacking attacks and obtain the splunkd session key via vectors related to the SPLUNKDSESSIONKEY parameter...