Skip to content
OpenAdvisories
Unscored CVE-2016-4859 EUVD-2016-5840GHSA-7h8p-mgrw-pw6c

Open redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.3, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.x prio…

Published May 12, 2017 · Updated Aug 6, 2024 · Assigned by jpcert

Vendor: Splunk Product: Splunk Enterprise Product: Splunk Light

Description

Open redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.3, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.x prior to 6.2.10, Splunk Enterprise 6.1.x prior to 6.1.11, Splunk Enterprise 6.0.x prior to 6.0.12, Splunk Enterprise 5.0.x prior to 5.0.16 and Splunk Light prior to 6.4.3 allows to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Affected products

VendorProductAffectedFixed
Splunk Splunk Enterprise 6.4.x prior to 6.4.3, 6.3.x prior to 6.3.6, 6.2.x prior to 6.2.10, 6.1.x prior to 6.1.11, 6.0.x prior to 6.0.12, 5.0.x prior to 5.0.16 —
Splunk Splunk Light prior to 6.4.3 —

References