CVE-2016-10126

2017-01-1011:00:00

mitre

www.cve.org

AI Score

9.5

Confidence

High

EPSS

0.003

Percentile

70.2%

JSON

Splunk Web in Splunk Enterprise 5.0.x before 5.0.17, 6.0.x before 6.0.13, 6.1.x before 6.1.12, 6.2.x before 6.2.12, 6.3.x before 6.3.8, and 6.4.x before 6.4.4 allows remote attackers to conduct HTTP request injection attacks and obtain sensitive REST API authentication-token information via unspecified vectors, aka SPL-128840.

References

www.securityfocus.com/bid/95412

www.splunk.com/view/SP-CAAAPSR