CVE-2010-2504

Published: Jun 28, 2010Modified: Apr 29, 2026

6.0

Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Exploitability: 6.8 / Impact: 6.4

Source: NVD

Description

Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allows remote authenticated users to obtain sensitive information via HTTP header injection, aka SPL-31066.

Affected (13)

Products: Splunk: Splunk

Splunk

1 product

Splunk

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Splunk Splunk	Version 4.0.10
Splunk Splunk	Version 4.0.1
Splunk Splunk	Version 4.0.2
Splunk Splunk	Version 4.0.3
Splunk Splunk	Version 4.0.4
Splunk Splunk	Version 4.0.5
Splunk Splunk	Version 4.0.6
Splunk Splunk	Version 4.0.7
Splunk Splunk	Version 4.0.8
Splunk Splunk	Version 4.0.9
Splunk Splunk	Version 4.0

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Splunk Splunk	Version 4.1.1
Splunk Splunk	Version 4.1

References (2)

http://www.splunk.com/view/SP-CAAAFGD

Source: cve@mitre.org

PatchVendor Advisory

http://www.splunk.com/view/SP-CAAAFGD

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.