CVE-2010-2502: Path Traversal

Published Jun 28, 2010

Updated

Multiple directory traversal vulnerabilities in Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allow (1) remote attackers to read arbitrary files, aka SPL-31194; (2) remote authenticated users to modify arbitrary files, aka SPL-31063; or (3) have an unknown impact via redirects, aka SPL-31067.

Affected Software

13 affected components

Splunk splunk=4.0

Splunk splunk=4.0.1

Splunk splunk=4.0.2

Splunk splunk=4.0.3

Splunk splunk=4.0.4

Splunk splunk=4.0.5

Splunk splunk=4.0.6

Splunk splunk=4.0.7

Splunk splunk=4.0.8

Splunk splunk=4.0.9

Splunk splunk=4.0.10

Splunk splunk=4.1

Splunk splunk=4.1.1

Remediation

Patch Available

http://www.splunk.com/view/SP-CAAAFGD

Event History

Jun 28, 2010

CVE Published

via MITRE·06:06 PM

Data Sourced

via MITRE·06:06 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-2502?

CVE-2010-2502 has a medium severity rating due to its potential to allow unauthorized access to files.

How do I fix CVE-2010-2502?

To fix CVE-2010-2502, upgrade Splunk to version 4.1.2 or later, as these versions contain the necessary security patches.

What types of attacks does CVE-2010-2502 facilitate?

CVE-2010-2502 facilitates directory traversal attacks, allowing attackers to read or modify arbitrary files.

Which versions of Splunk are affected by CVE-2010-2502?

CVE-2010-2502 affects Splunk versions from 4.0 through 4.0.10 and 4.1 through 4.1.1.

Who can exploit CVE-2010-2502?

Both remote attackers and authenticated users can exploit CVE-2010-2502, depending on the specific vulnerability.