Security Advisory
CVE-2010-3323
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Splunk 4.0.0 through 4.1.4 allows remote attackers to conduct session hijacking attacks and obtain the splunkd session key via vectors related to the SPLUNKD_SESSION_KEY parameter.