Path Traversal in Splunk

CVE-2010-2502

Multiple directory traversal vulnerabilities in Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allow (1) remote attackers to read arbitrary files, aka SPL-31194; (2) remote authenticated users to modify arbitrary files, aka SPL-31063; or (3) have an unknown impact via redirects, aka SPL-31067.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.026 (84.0th percentile) — read the EPSS interpretation.

Affected products

  • Splunk — versions 4.0.6, 4.1, 4.0.9
  • N/a — versions n/a

Weakness classification (CWE)

References