Description (CNA)
Open redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.3, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.x prior to 6.2.10, Splunk Enterprise 6.1.x prior to 6.1.11, Splunk Enterprise 6.0.x prior to 6.0.12, Splunk Enterprise 5.0.x prior to 5.0.16 and Splunk Light prior to 6.4.3 allows to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Splunk Inc. / Splunk Enterprise | affected 6.4.x prior to 6.4.3; affected 6.3.x prior to 6.3.6; affected 6.2.x prior to 6.2.10; affected 6.1.x prior to 6.1.11; affected 6.0.x prior to 6.0.12; affected 5.0.x prior to 5.0.16 |
| Splunk Inc. / Splunk Light | affected prior to 6.4.3 |
CWE
No CWE identifiers supplied.
References
- https://jvn.jp/en/jp/JVN64800312/index.html
- https://www.splunk.com/view/SP-CAAAPQ6
- http://www.securityfocus.com/bid/92603
ADP enrichment
No English description supplied.