Multiple directory traversal vulnerabilities in Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allow (1) remote attackers to read arbitrary files, aka SPL-31194; (2) remote authenticated users to modify arbitrary files, aka SPL-31063; or (3) have an unknown impact via redirects, aka SPL-31067.
2010-06-28T18:30:00.937
2025-04-11T00:51:21.963
Deferred
CVSSv2: 7.5 (HIGH)
AV:N/AC:M/Au:S/C:C/I:P/A:P
6.8
8.5
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | splunk | splunk | 4.0 | Yes |
| Application | splunk | splunk | 4.0.1 | Yes |
| Application | splunk | splunk | 4.0.2 | Yes |
| Application | splunk | splunk | 4.0.3 | Yes |
| Application | splunk | splunk | 4.0.4 | Yes |
| Application | splunk | splunk | 4.0.5 | Yes |
| Application | splunk | splunk | 4.0.6 | Yes |
| Application | splunk | splunk | 4.0.7 | Yes |
| Application | splunk | splunk | 4.0.8 | Yes |
| Application | splunk | splunk | 4.0.9 | Yes |
| Application | splunk | splunk | 4.0.10 | Yes |
| Application | splunk | splunk | 4.1 | Yes |
| Application | splunk | splunk | 4.1.1 | Yes |