CVE-2010-3323

Published: Sep 14, 2010Modified: Apr 29, 2026

4.6

Vector

AV:N/AC:H/Au:S/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Splunk 4.0.0 through 4.1.4 allows remote attackers to conduct session hijacking attacks and obtain the splunkd session key via vectors related to the SPLUNKD_SESSION_KEY parameter.

Affected (17)

Products: Splunk: Splunk

Splunk

1 product

Splunk

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Splunk Splunk	Version 4.0.10
Splunk Splunk	Version 4.0.11
Splunk Splunk	Version 4.0.1
Splunk Splunk	Version 4.0.2
Splunk Splunk	Version 4.0.3
Splunk Splunk	Version 4.0.4
Splunk Splunk	Version 4.0.5
Splunk Splunk	Version 4.0.6
Splunk Splunk	Version 4.0.7
Splunk Splunk	Version 4.0.8
Splunk Splunk	Version 4.0.9
Splunk Splunk	Version 4.0
Splunk Splunk	Version 4.1.1
Splunk Splunk	Version 4.1.2
Splunk Splunk	Version 4.1.3
Splunk Splunk	Version 4.1.4
Splunk Splunk	Version 4.1

References (2)

http://www.splunk.com/view/SP-CAAAFQ6

Source: cve@mitre.org

PatchVendor Advisory

http://www.splunk.com/view/SP-CAAAFQ6

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.