CVE-2016-4859

🗓️ 12 May 2017 18:00:00Reported by jpcertType

Open redirect vulnerability in Splunk versions prior to 6.4.3 allows phishing attack

Reporter	Title	Published	Views	Family All 11
CNVD	Splunk Web Open Redirect Vulnerability	25 Aug 201600:00	–	cnvd
CVE	CVE-2016-4859	12 May 201718:00	–	cve
EUVD	EUVD-2016-5840	7 Oct 202500:30	–	euvd
Japan Vulnerability Notes	JVN#64800312: Splunk Enterprise and Splunk Light vulnerable to open redirect	16 Sep 201600:00	–	jvn
Japan Vulnerability Notes	Splunk Enterprise and Splunk Light vulnerable to open redirect	16 Sep 201605:16	–	jvn
NVD	CVE-2016-4859	12 May 201718:29	–	nvd
OpenVAS	Splunk Enterprise Open Redirection Vulnerability (SP-CAAAPQ6)	26 Aug 201600:00	–	openvas
OpenVAS	Splunk Light Open Redirection Vulnerability	26 Aug 201600:00	–	openvas
OSV	CVE-2016-4859	12 May 201718:29	–	osv
Prion	Open redirect	12 May 201718:29	–	prion

[
  {
    "product": "Splunk Enterprise",
    "vendor": "Splunk Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "6.4.x prior to 6.4.3"
      },
      {
        "status": "affected",
        "version": "6.3.x prior to 6.3.6"
      },
      {
        "status": "affected",
        "version": "6.2.x prior to 6.2.10"
      },
      {
        "status": "affected",
        "version": "6.1.x prior to 6.1.11"
      },
      {
        "status": "affected",
        "version": "6.0.x prior to 6.0.12"
      },
      {
        "status": "affected",
        "version": "5.0.x prior to 5.0.16"
      }
    ]
  },
  {
    "product": "Splunk Light",
    "vendor": "Splunk Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "prior to 6.4.3"
      }
    ]
  }
]

Source	Link
splunk	www.splunk.com/view/SP-CAAAPQ6
securityfocus	www.securityfocus.com/bid/92603
jvn	www.jvn.jp/en/jp/JVN64800312/index.html

15 May 2017 09:57Current

6.1Medium risk

Vulners AI Score6.1

EPSS0.00229