CVE-2010-2504: Medium severity Splunk splunk vulnerability
Published Jun 28, 2010
·Updated
Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allows remote authenticated users to obtain sensitive information via HTTP header injection, aka SPL-31066.
Affected Software
13 affected components
Splunk splunk=4.0
Splunk splunk=4.0.1
Splunk splunk=4.0.2
Splunk splunk=4.0.3
Splunk splunk=4.0.4
Splunk splunk=4.0.5
Splunk splunk=4.0.6
Splunk splunk=4.0.7
Splunk splunk=4.0.8
Splunk splunk=4.0.9
Splunk splunk=4.0.10
Splunk splunk=4.1
Splunk splunk=4.1.1
Remediation
Patch Available
Event History
Jun 28, 2010
CVE Published
via MITRE·06:06 PM
Data Sourced
via MITRE·06:06 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-2504?
CVE-2010-2504 is classified as a medium severity vulnerability due to its potential for information disclosure.
2
How do I fix CVE-2010-2504?
To fix CVE-2010-2504, upgrade Splunk to version 4.1.2 or later, which addresses this vulnerability.
3
Who is affected by CVE-2010-2504?
CVE-2010-2504 affects Splunk versions 4.0 through 4.0.10 and 4.1 through 4.1.1.
4
What type of vulnerability is CVE-2010-2504?
CVE-2010-2504 is a HTTP header injection vulnerability that allows remote authenticated users to access sensitive information.
5
Can CVE-2010-2504 be exploited remotely?
Yes, CVE-2010-2504 can be exploited remotely by authenticated users who manipulate HTTP headers.