CVE-2010-2502: Multiple directory traversal vulnerabilities in Splunk 4.0 through 4.0.10 and 4.1 through 4.1.1 allow (1) r...

Security readout for executives and security teams

CVE-2010-2502 covers multiple directory traversal issues in old Splunk 4.0 and 4.1 releases. The reported impacts include unauthenticated arbitrary file read, authenticated arbitrary file modification, and an unspecified redirect-related impact. This matters if legacy Splunk is still running, especially where exposed to untrusted networks. Exposure is limited to organizations still operating Splunk 4.0.0-4.0.10 or 4.1.0-4.1.1. Risk is higher for systems reachable from the internet, partner networks, or broad internal user populations. Treat as high priority only where legacy Splunk versions still exist. The vulnerability is old, but the reported ability to read or modify files makes any remaining affected deployment a meaningful data exposure and integrity risk. Mitigation focus: Inventory Splunk servers and confirm exact installed versions.; Prioritize replacement or upgrade of affected 4.0 and 4.1 builds.; Check Splunk advisory SP-CAAAFGD for vendor-supported remediation guidance..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.