Splunk Session Hijacking and Information Disclosure Vulnerabilities

Bugtraq ID:	43276
Class:	Input Validation Error
CVE:	CVE-2010-3322 CVE-2010-3323
Remote:	Yes
Local:	No
Published:	Sep 09 2010 12:00AM
Updated:	Sep 09 2010 12:00AM
Credit:	Aaron
Vulnerable:	Splunk Splunk 4.1.3 Splunk Splunk 4.1.2 Splunk Splunk 4.1.1 Splunk Splunk 4.0.11 Splunk Splunk 4.0.10 Splunk Splunk 4.0.9 Splunk Splunk 4.0.8 Splunk Splunk 4.0.7 Splunk Splunk 4.0.6 Splunk Splunk 4.0.5 Splunk Splunk 4.0.4 Splunk Splunk 4.0.3 Splunk Splunk 4.0.2 Splunk Splunk 4.0.1 Splunk Splunk 4.0 Splunk Splunk 4.1.4 Splunk Splunk 4.1 Splunk Splunk 4
Not Vulnerable:	Splunk Splunk 4.1.5

Splunk Session Hijacking and Information Disclosure Vulnerabilities

Splunk is prone to a session-hijacking vulnerability and an information-disclosure vulnerability.

An attacker can exploit these vulnerabilities to gain access to the affected application, obtain sensitive information, or possibly perform actions with elevated privileges.

Versions prior to Splunk 4.1.5 are vulnerable.

Splunk Session Hijacking and Information Disclosure Vulnerabilities

Attackers can exploit the session-hijacking vulnerability by enticing an unsuspecting user to visit a malicious web-page.

The vendor has reported proof-of-concept code exists for these issues but it has not been disclosed.

Splunk Session Hijacking and Information Disclosure Vulnerabilities

References:

• Splunk 4.1.5 addresses two security vulnerabilities (Splunk)
  
• Splunk Homepage (Splunk)