CVE-2011-4644

Published: Jan 3, 2012Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Splunk 4.2.5 and earlier, when a Free license is selected, enables potentially undesirable functionality within an environment that intentionally does not support authentication, which allows remote attackers to (1) read arbitrary files via a management-console session that leverages the ability to create crafted data sources, or (2) execute management commands via an HTTP request.

Affected (65)

Products: Splunk: Splunk

Splunk

1 product

Splunk

Configuration A

65 vulnerable

Vulnerable Software	Affected Versions
Splunk Splunk	Up to 4.2.5
Splunk Splunk	Version 2.1
Splunk Splunk	Version 2.2.1
Splunk Splunk	Version 2.2.3
Splunk Splunk	Version 2.2.6
Splunk Splunk	Version 2.2
Splunk Splunk	Version 3.0.1
Splunk Splunk	Version 3.0.2
Splunk Splunk	Version 3.0
Splunk Splunk	Version 3.1.1
Splunk Splunk	Version 3.1.2
Splunk Splunk	Version 3.1.3
Splunk Splunk	Version 3.1.4
Splunk Splunk	Version 3.1
Splunk Splunk	Version 3.2.1
Splunk Splunk	Version 3.2.2
Splunk Splunk	Version 3.2.3
Splunk Splunk	Version 3.2.4
Splunk Splunk	Version 3.2.5
Splunk Splunk	Version 3.2.6
Splunk Splunk	Version 3.2
Splunk Splunk	Version 3.3.1
Splunk Splunk	Version 3.3.2
Splunk Splunk	Version 3.3.3
Splunk Splunk	Version 3.3.4
Splunk Splunk	Version 3.3
Splunk Splunk	Version 3.4.10
Splunk Splunk	Version 3.4.11
Splunk Splunk	Version 3.4.12
Splunk Splunk	Version 3.4.13
Splunk Splunk	Version 3.4.14
Splunk Splunk	Version 3.4.1
Splunk Splunk	Version 3.4.2
Splunk Splunk	Version 3.4.3
Splunk Splunk	Version 3.4.5
Splunk Splunk	Version 3.4.6
Splunk Splunk	Version 3.4.8
Splunk Splunk	Version 3.4.9
Splunk Splunk	Version 3.4
Splunk Splunk	Version 4.0.10
Splunk Splunk	Version 4.0.11
Splunk Splunk	Version 4.0.1
Splunk Splunk	Version 4.0.2
Splunk Splunk	Version 4.0.3
Splunk Splunk	Version 4.0.4
Splunk Splunk	Version 4.0.5
Splunk Splunk	Version 4.0.6
Splunk Splunk	Version 4.0.7
Splunk Splunk	Version 4.0.8
Splunk Splunk	Version 4.0.9
Splunk Splunk	Version 4.0
Splunk Splunk	Version 4.1.1
Splunk Splunk	Version 4.1.2
Splunk Splunk	Version 4.1.3
Splunk Splunk	Version 4.1.4
Splunk Splunk	Version 4.1.5
Splunk Splunk	Version 4.1.6
Splunk Splunk	Version 4.1.7
Splunk Splunk	Version 4.1.8
Splunk Splunk	Version 4.1
Splunk Splunk	Version 4.2.1
Splunk Splunk	Version 4.2.2
Splunk Splunk	Version 4.2.3
Splunk Splunk	Version 4.2.4
Splunk Splunk	Version 4.2