CVE-2014-5197

Directory traversal vulnerability in 1 Splunk Web or the 2 Splunkd HTTP Server in Splunk Enterprise 6.1.x before 6.1.3 allows remote authenticated users to read arbitrary files via a .. dot dot in a URI, related to search ids...

CVE-2014-5197

Splunk Enterprise 6.1.x before 6.1.3 is affected by a directory traversal (CVE-2014-5197) in Splunk Web and the Splunkd HTTP Server. The vulnerability allows remote authenticated users to read arbitrary files via a .. in a URI, related to search IDs. Impact is read access to local files; no expli...