CVE-2014-5197: Path Traversal
Published Aug 12, 2014
·Updated
Directory traversal vulnerability in (1) Splunk Web or the (2) Splunkd HTTP Server in Splunk Enterprise 6.1.x before 6.1.3 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URI, related to search ids.
Affected Software
3 affected components
Splunk splunk=6.1
Splunk splunk=6.1.1
Splunk splunk=6.1.2
Remediation
Patch Available
Event History
Aug 12, 2014
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-5197?
CVE-2014-5197 is considered a medium severity vulnerability due to its potential to allow remote authenticated users to access sensitive files.
2
How do I fix CVE-2014-5197?
To fix CVE-2014-5197, upgrade your Splunk Enterprise to version 6.1.3 or later.
3
Who is affected by CVE-2014-5197?
CVE-2014-5197 affects Splunk Enterprise versions 6.1, 6.1.1, and 6.1.2.
4
What kind of attacks can be executed with CVE-2014-5197?
An attacker can exploit CVE-2014-5197 by using directory traversal techniques to read arbitrary files on the server.
5
Is CVE-2014-5197 a remote or local vulnerability?
CVE-2014-5197 is a remote vulnerability that can be exploited by authenticated users.