critical9.3Public exploit code
CVE-2011-4644
Splunk 4.2.5 and earlier, when a Free license is selected, enables potentially undesirable functionality within an environment that intentionally does not supp…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Splunk - Remote Command Execution2011-12-15 · remote · multiple · Verified
Impact
Splunk 4.2.5 and earlier, when a Free license is selected, enables potentially undesirable functionality within an environment that intentionally does not support authentication, which allows remote attackers to (1) read arbitrary files via a management-console session that leverages the ability to create crafted data sources, or (2) execute management commands via an HTTP request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Splunk | Splunk | through 4.2.5 Versions 2.1, 2.2, 2.2.1, 2.2.3, 2.2.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.exploit-db.com/exploits/18245/
- http://www.sec-1.com/blog/?p=233
- http://www.sec-1.com/blog/wp-content/uploads/2011/12/Attacking_Splunk_Release.pdf
- http://www.exploit-db.com/exploits/18245/
- http://www.sec-1.com/blog/?p=233
- http://www.sec-1.com/blog/wp-content/uploads/2011/12/Attacking_Splunk_Release.pdf