CVE-2011-4644

Splunk < 4.2.5 - Unauthenticated Arbitrary File Read and Management Command Execution

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2011-4644. PoCs published by Gary O'Leary-Steele.

AI-analyzed exploit summary This exploit targets CVE-2011-4644, a vulnerability in Splunk that allows remote authentication bypass and potential remote code execution. The script includes functionality for brute-forcing credentials, interacting with Splunk's web and management interfaces, and leveraging session keys for further exploitation.

Description

Splunk 4.2.5 and earlier, when a Free license is selected, enables potentially undesirable functionality within an environment that intentionally does not support authentication, which allows remote attackers to (1) read arbitrary files via a management-console session that leverages the ability to create crafted data sources, or (2) execute management commands via an HTTP request.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Gary O'Leary-Steele · pythonremotemultiple
https://www.exploit-db.com/exploits/18245

This exploit targets CVE-2011-4644, a vulnerability in Splunk that allows remote authentication bypass and potential remote code execution. The script includes functionality for brute-forcing credentials, interacting with Splunk's web and management interfaces, and leveraging session keys for further exploitation.

Classification
Working Poc 95%
Attack Type
Auth Bypass
Complexity
Moderate
Reliability
Reliable
Target: Splunk (versions affected by CVE-2011-4644)
No auth needed
Prerequisites: Network access to Splunk's web interface (port 8000) and management port (port 8089) · Splunk instance vulnerable to CVE-2011-4644
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (3)

Core 3
Core References
Exploit x_refsource_misc
http://www.sec-1.com/blog/?p=233
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/18245/

Scores

EPSS 0.0783
EPSS Percentile 93.9%

Details

CWE
CWE-287
Status published
Products (50)
splunk/splunk 2.1
splunk/splunk 2.2
splunk/splunk 2.2.1
splunk/splunk 2.2.3
splunk/splunk 2.2.6
splunk/splunk 3.0
splunk/splunk 3.0.1
splunk/splunk 3.0.2
splunk/splunk 3.1
splunk/splunk 3.1.1
... and 40 more
Published Jan 03, 2012
Tracked Since Feb 18, 2026