Total vulnerabilities in the database
Directory traversal vulnerability in (1) Splunk Web or the (2) Splunkd HTTP Server in Splunk Enterprise 6.1.x before 6.1.3 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a URI, related to search ids.
Software | From | Fixed in |
---|---|---|
splunk / splunk | 6.1.2 | 6.1.2.x |
splunk / splunk | 6.1.1 | 6.1.1.x |
splunk / splunk | 6.1 | 6.1.x |