Skip to content
OpenAdvisories
Unscored CVE-2014-5197 EUVD-2014-5095GHSA-hc66-v58h-pwj4

Directory traversal vulnerability in (1) Splunk Web or the (2) Splunkd HTTP Server in Splunk Enterprise 6.1.x before 6.1.3 allows remote au…

Published Aug 12, 2014 · Updated Sep 17, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in (1) Splunk Web or the (2) Splunkd HTTP Server in Splunk Enterprise 6.1.x before 6.1.3 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URI, related to search ids.

References