CVE-2011-4643

Multiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote authenticated users to read arbitrary files via a .. (dot dot) in a URI to (1) Splunk Web or (2) the Splunkd HTTP Server, aka SPL-45243.

CVSS v2.0 4.0 MEDIUM

4.0^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://secunia.com/advisories/47232
http://www.exploit-db.com/exploits/18245/	Exploit
http://www.sec-1.com/blog/?p=233
http://www.sec-1.com/blog/wp-content/uploads/2011/12/Attacking_Splunk_Release.pdf	Exploit
http://www.securitytracker.com/id?1026451
http://www.splunk.com/view/SP-CAAAGMM	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/72244
http://secunia.com/advisories/47232
http://www.exploit-db.com/exploits/18245/	Exploit
http://www.sec-1.com/blog/?p=233
http://www.sec-1.com/blog/wp-content/uploads/2011/12/Attacking_Splunk_Release.pdf	Exploit
http://www.securitytracker.com/id?1026451
http://www.splunk.com/view/SP-CAAAGMM	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/72244

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:splunk:splunk:4.0:::::::*
	cpe:2.3:a:splunk:splunk:4.0.1:::::::*
	cpe:2.3:a:splunk:splunk:4.0.2:::::::*
	cpe:2.3:a:splunk:splunk:4.0.3:::::::*
	cpe:2.3:a:splunk:splunk:4.0.4:::::::*
	cpe:2.3:a:splunk:splunk:4.0.5:::::::*
	cpe:2.3:a:splunk:splunk:4.0.6:::::::*
	cpe:2.3:a:splunk:splunk:4.0.7:::::::*
	cpe:2.3:a:splunk:splunk:4.0.8:::::::*
	cpe:2.3:a:splunk:splunk:4.0.9:::::::*
	cpe:2.3:a:splunk:splunk:4.0.10:::::::*
	cpe:2.3:a:splunk:splunk:4.0.11:::::::*
	cpe:2.3:a:splunk:splunk:4.1:::::::*
	cpe:2.3:a:splunk:splunk:4.1.1:::::::*
	cpe:2.3:a:splunk:splunk:4.1.2:::::::*
	cpe:2.3:a:splunk:splunk:4.1.3:::::::*
	cpe:2.3:a:splunk:splunk:4.1.4:::::::*
	cpe:2.3:a:splunk:splunk:4.1.5:::::::*
	cpe:2.3:a:splunk:splunk:4.1.6:::::::*
	cpe:2.3:a:splunk:splunk:4.1.7:::::::*
	cpe:2.3:a:splunk:splunk:4.1.8:::::::*
	cpe:2.3:a:splunk:splunk:4.2:::::::*
	cpe:2.3:a:splunk:splunk:4.2.1:::::::*
	cpe:2.3:a:splunk:splunk:4.2.2:::::::*
	cpe:2.3:a:splunk:splunk:4.2.3:::::::*
	cpe:2.3:a:splunk:splunk:4.2.4:::::::*

History

21 Nov 2024, 01:32

Type	Values Removed	Values Added
References	~~() http://secunia.com/advisories/47232 -~~	() http://secunia.com/advisories/47232 -
References	~~() http://www.exploit-db.com/exploits/18245/ - Exploit~~	() http://www.exploit-db.com/exploits/18245/ - Exploit
References	~~() http://www.sec-1.com/blog/?p=233 -~~	() http://www.sec-1.com/blog/?p=233 -
References	~~() http://www.sec-1.com/blog/wp-content/uploads/2011/12/Attacking_Splunk_Release.pdf - Exploit~~	() http://www.sec-1.com/blog/wp-content/uploads/2011/12/Attacking_Splunk_Release.pdf - Exploit
References	~~() http://www.securitytracker.com/id?1026451 -~~	() http://www.securitytracker.com/id?1026451 -
References	~~() http://www.splunk.com/view/SP-CAAAGMM - Vendor Advisory~~	() http://www.splunk.com/view/SP-CAAAGMM - Vendor Advisory
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/72244 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/72244 -

Information

Published : 2012-01-03 11:55

Updated : 2024-11-21 01:32

NVD link : CVE-2011-4643

Mitre link : CVE-2011-4643

CVE.ORG link : CVE-2011-4643

JSON object : View

Products Affected

splunk

splunk

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

4.0 /10