CVE-2010-2504
Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allows remote authenticated users to obtain sensitive information via HTTP header injection, aka SPL-31066.
- Score
- CVSS 2.0 6.0 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2010-06-28
- Last modified
- 2024-09-16
Affected products
References
- http://www.splunk.com/view/SP-CAAAFGD