CVE-2011-4643

Published Jan 3, 2012

Last updated 7 years ago

Overview

Description: Multiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote authenticated users to read arbitrary files via a .. (dot dot) in a URI to (1) Splunk Web or (2) the Splunkd HTTP Server, aka SPL-45243.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 4
Impact score: 2.9
Exploitability score: 8
Vector string: AV:N/AC:L/Au:S/C:P/I:N/A:N

Weaknesses

nvd@nist.gov: CWE-22

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:splunk:splunk:4.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4FCFC155-E9C9-4AE3-9CB8-D2244B9E0269"
          },
          {
            "criteria": "cpe:2.3:a:splunk:splunk:4.0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "368E31F0-E8F2-459E-B78E-EEC3AB544669"
          },
          {
            "criteria": "cpe:2.3:a:splunk:splunk:4.0.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CDCB0EF9-08B5-4B91-876D-2C7CF7880AF9"
          },
          {
            "criteria": "cpe:2.3:a:splunk:splunk:4.0.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1709D44B-DC91-4BCC-982F-7BE361A09FF6"
          },
          {
            "criteria": "cpe:2.3:a:splunk:splunk:4.0.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "62042A83-23C7-478A-BE5C-8C66B6FB59C4"
          },
          {
            "criteria": "cpe:2.3:a:splunk:splunk:4.0.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FDB5CDED-459E-4AF9-8747-1F58FA1950E4"
          },
          {
            "criteria": "cpe:2.3:a:splunk:splunk:4.0.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0705659E-3230-4C28-BA56-F1F2E8BEB83A"
          },
          {
            "criteria": "cpe:2.3:a:splunk:splunk:4.0.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8FD076DE-EBF4-4829-847A-8B20DD614414"
          },
          {
            "criteria": "cpe:2.3:a:splunk:splunk:4.0.8:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B16311C2-2BB3-42E3-BFF8-860467C10611"
          },
          {
            "criteria": "cpe:2.3:a:splunk:splunk:4.0.9:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "07F6F485-280B-408C-A381-76807862785D"
          },
          {
            "criteria": "cpe:2.3:a:splunk:splunk:4.0.10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "551D7F83-61DD-4333-86ED-B1D38659B76E"
          },
          {
            "criteria": "cpe:2.3:a:splunk:splunk:4.0.11:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "43BD38F5-B7C6-4CE9-A1B0-1E201CD0979E"
          },
          {
            "criteria": "cpe:2.3:a:splunk:splunk:4.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6B16A56F-EACF-47AC-B541-2D865CC31705"
          },
          {
            "criteria": "cpe:2.3:a:splunk:splunk:4.1.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C96B57A4-D586-444B-BD14-311AEBC40C00"
          },
          {
            "criteria": "cpe:2.3:a:splunk:splunk:4.1.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "335BA0E8-428B-4163-A809-90BEE79A7395"
          },
          {
            "criteria": "cpe:2.3:a:splunk:splunk:4.1.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1AE5B6A8-FB1E-4C0A-AC53-C0ABABE595C9"
          },
          {
            "criteria": "cpe:2.3:a:splunk:splunk:4.1.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AE95A88B-F94B-4B3C-B0FC-0202E9E70FC5"
          },
          {
            "criteria": "cpe:2.3:a:splunk:splunk:4.1.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "01CE667B-19F8-4ACE-BCF1-5CC0C1862720"
          },
          {
            "criteria": "cpe:2.3:a:splunk:splunk:4.1.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "74576145-857B-4A73-A9DE-B8CD6D45BB1E"
          },
          {
            "criteria": "cpe:2.3:a:splunk:splunk:4.1.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A5323DA2-5E22-428C-98E9-EA3E9927C1E3"
          },
          {
            "criteria": "cpe:2.3:a:splunk:splunk:4.1.8:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B1EE64CA-F199-4594-A8FA-CF5138492BCA"
          },
          {
            "criteria": "cpe:2.3:a:splunk:splunk:4.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "987B0894-735C-4E68-876B-C3041F36D4DA"
          },
          {
            "criteria": "cpe:2.3:a:splunk:splunk:4.2.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "050ABEF8-D38E-49CF-A91B-F007DA4FBAD1"
          },
          {
            "criteria": "cpe:2.3:a:splunk:splunk:4.2.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AA8AC9B9-3A83-4899-85BC-798BEFE90AEB"
          },
          {
            "criteria": "cpe:2.3:a:splunk:splunk:4.2.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FD250E15-098A-4AF6-89E2-E25A98E55EBC"
          },
          {
            "criteria": "cpe:2.3:a:splunk:splunk:4.2.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BD9FD9D3-6E15-45A4-B066-2BA17F4D6512"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References