CVE-2010-2502

CVE-2010-2502 affects Splunk Web in Splunk 4.0.x (before 4.0.11) and 4.1.x (before 4.1.2). It enables directory traversal to read arbitrary files (SPL-31194); remote authenticated users can modify arbitrary files (SPL-31063); and there is an unknown impact via redirects (SPL-31067). Remediation n...