This host is running Splunk and is prone to multiple vulnerabilities.

Successful exploitation will allow attackers to obtain sensitive information and gain privileges. Impact Level: Application

Upgrade to Splunk version 4.1.5 or later, For updates refer to http://www.splunk.com/download

- XML parser is vulnerable to XXE (XML eXternal Entity) attacks, which allows remote authenticated users to obtain sensitive information and gain privileges. - SPLUNKD_SESSION_KEY parameter is vulnerable to session hijacking.

Splunk version 4.0.0 through 4.1.4

• http://www.splunk.com/view/SP-CAAAFQ6

---

Updated on 2015-03-25