CVE-2010-3323: Splunk

Medium severity, CVSS 4.6. EPSS: 0.8% chance of exploitation in the next 30 days.

Splunk 4.0.0 through 4.1.4 allows remote attackers to conduct session hijacking attacks and obtain the splunkd session key via vectors related to the SPLUNKD_SESSION_KEY parameter.

Affected products

• Splunk Splunk: version 4.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; version 4.0.5 only; …

Published 2010-09-14. Last modified 2026-06-16.