Multiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote authenticated users to read arbitrary files via a .. (dot dot) in a URI to (1) Splunk Web or (2) the Splunkd HTTP Server, aka SPL-45243.
Max CVSS
4.0
EPSS Score
0.57%
Published
2012-01-03
Updated
2017-08-29
1 vulnerabilities found