QID 378509

Splunk is a log monitoring and reporting tool with search capabilities.

Splunk Enterprise multiple flaws let remote users bypass security and deny service and remote authenticated users execute arbitrary code

Affected Version Prior to
Splunk Enterprise 6.3.3.4, 6.2.9. 6.1.10, 6.0.11, and 5.0.15

A remote authenticated user can access and overwrite files on the target system.
A remote authenticated user can execute arbitrary code on the target system.
A remote authenticated user can obtain potentially sensitive information on the target system.
A remote user can cause denial of service conditions. A remote user can bypass security controls on the target system.