medium4.6
CVE-2010-3323
Splunk 4.0.0 through 4.1.4 allows remote attackers to conduct session hijacking attacks and obtain the splunkd session key via vectors related to the SPLUNKD_S…
Impact
Splunk 4.0.0 through 4.1.4 allows remote attackers to conduct session hijacking attacks and obtain the splunkd session key via vectors related to the SPLUNKD_SESSION_KEY parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Splunk | Splunk | Versions 4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5 |