CVE-2010-2502

CVE-2010-2502 describes multiple directory traversal vulnerabilities in Splunk versions 4.0 through 4.0.10 and 4.1 through 4.1.1. These flaws allow remote attackers to read arbitrary files, authenticated users to modify arbitrary files, and have an unknown impact via redirects. With a CVSS score of 7.5, the vulnerability is of high severity, requiring medium attack complexity and authenticated access for some impacts, leading to potential complete confidentiality compromise and partial integrity/availability impacts. Despite its age and severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.