Splunk CVE-2010-2429 Cross-Site Scripting Vulnerability

Bugtraq ID:	73536
Class:	Input Validation Error
CVE:	CVE-2010-2429
Remote:	Yes
Local:	No
Published:	Jun 24 2010 12:00AM
Updated:	Jun 24 2010 12:00AM
Credit:	Unknown
Vulnerable:	Splunk Splunk 4.1.2 Splunk Splunk 4.1.1 Splunk Splunk 4.1 Splunk Splunk 4.0.9 Splunk Splunk 4.0.8 Splunk Splunk 4.0.7 Splunk Splunk 4.0.6 Splunk Splunk 4.0.5 Splunk Splunk 4.0.4 Splunk Splunk 4.0.3 Splunk Splunk 4.0.2 Splunk Splunk 4.0.11 Splunk Splunk 4.0.10 Splunk Splunk 4.0.1 Splunk Splunk 4.0
Not Vulnerable:

Splunk CVE-2010-2429 Cross-Site Scripting Vulnerability

Splunk is prone to a cross-site scripting vulnerability. Cross-site scripting (XSS) vulnerability in Splunk 4.0 through 4.1.2, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer in a "404 Not Found" response.

Splunk CVE-2010-2429 Cross-Site Scripting Vulnerability

References:

• IBM X-Force Exchange Beta (XF)
  
• Cross-Site Scripting in Splunk Web with 404 Responses in Internet Explorer - Jun (Splunk)