Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Splunk 4.0.0 through 4.1.4 allows remote attackers to conduct session hijacking attacks and obtain the splunkd session key via vectors related to the SPLUNKD_SESSION_KEY parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Splunk未明漏洞
Vulnerability Description
Splunk是美国Splunk公司的一套数据收集分析软件。该软件主要用于收集、索引和分析机器产生的数据，包括所有IT系统和基础结构（物理、虚拟和云）生成的数据。 Splunk 4.0.0至4.1.4版本中存在未明漏洞。远程攻击者可以借助与SPLUNKD_SESSION_KEY参数相关的向量进行会话劫持攻击并获取splunkd会话密钥。
CVSS Information
N/A
Vulnerability Type
N/A