Splunk · Splunk · CVE-2010-2502
**Name of the Vulnerable Software and Affected Versions**
Splunk versions 4.0 through 4.0.10
Splunk versions 4.1 through 4.1.1
**Description**
The issue allows remote attackers to read arbitrary files, and remote authenticated users to modify arbitrary files. It may also have an unknown impact via redirects.
**Recommendations**
For versions 4.0 through 4.0.10, update to a version outside of this range to mitigate the risk.
For versions 4.1 through 4.1.1, update to a version outside of this range to mitigate the risk.
As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.