VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 3, 2012· Updated Jun 16, 2026

CVE-2011-4643

CVE-2011-4643

Description

Multiple directory traversal vulnerabilities in Splunk 4.x before 4.2.5 allow remote authenticated users to read arbitrary files via a .. (dot dot) in a URI to (1) Splunk Web or (2) the Splunkd HTTP Server, aka SPL-45243.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

27
  • Splunk/Splunk27 versions
    cpe:2.3:a:splunk:splunk:4.0:*:*:*:*:*:*:*+ 26 more
    • cpe:2.3:a:splunk:splunk:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:splunk:splunk:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:splunk:splunk:4.0.10:*:*:*:*:*:*:*
    • cpe:2.3:a:splunk:splunk:4.0.11:*:*:*:*:*:*:*
    • cpe:2.3:a:splunk:splunk:4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:splunk:splunk:4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:splunk:splunk:4.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:splunk:splunk:4.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:splunk:splunk:4.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:splunk:splunk:4.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:splunk:splunk:4.0.8:*:*:*:*:*:*:*
    • cpe:2.3:a:splunk:splunk:4.0.9:*:*:*:*:*:*:*
    • cpe:2.3:a:splunk:splunk:4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:splunk:splunk:4.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:splunk:splunk:4.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:splunk:splunk:4.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:splunk:splunk:4.1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:splunk:splunk:4.1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:splunk:splunk:4.1.6:*:*:*:*:*:*:*
    • cpe:2.3:a:splunk:splunk:4.1.7:*:*:*:*:*:*:*
    • cpe:2.3:a:splunk:splunk:4.1.8:*:*:*:*:*:*:*
    • cpe:2.3:a:splunk:splunk:4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:splunk:splunk:4.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:splunk:splunk:4.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:splunk:splunk:4.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:splunk:splunk:4.2.4:*:*:*:*:*:*:*
    • (no CPE)range: <4.2.5

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.