Vulnerability in Splunk

CVE-2010-3323

Splunk 4.0.0 through 4.1.4 allows remote attackers to conduct session hijacking attacks and obtain the splunkd session key via vectors related to the SPLUNKD_SESSION_KEY parameter.

EPSS: 0.008 (51.6th percentile) — read the EPSS interpretation.

Affected products

  • Splunk — versions 4.0.6, 4.1.3, 4.0.9
  • N/a — versions n/a

References