CVE-2010-3323
Splunk 4.0.0 through 4.1.4 allows remote attackers to conduct session hijacking attacks and obtain the splunkd session key via vectors related to the SPLUNKD_SESSION_KEY parameter.
- Score
- CVSS 2.0 4.6 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2010-09-14
- Last modified
- 2024-09-16
Affected products
References
- http://www.splunk.com/view/SP-CAAAFQ6
