CVE-2011-4643

CVE-2011-4643 affects Splunk 4.x prior to 4.2.5. Multiple directory traversal vulnerabilities allow remote authenticated users to read arbitrary files via a .. in a URI to either Splunk Web or the Splunkd HTTP Server (SPL-45243). Root cause is improper handling of dot-dot path components in the w...