Design/Logic Flaw

2017-11-3002:29:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.1%

JSON

Splunk Web in Splunk Enterprise 7.0.x before 7.0.0.1, 6.6.x before 6.6.3.2, 6.5.x before 6.5.6, 6.4.x before 6.4.9, and 6.3.x before 6.3.12, when the SAML authType is enabled, mishandles SAML, which allows remote attackers to bypass intended access restrictions or conduct impersonation attacks.

CPENameOperatorVersion
splunkge6.3.0
splunklt6.3.12
splunkge6.4.0
splunklt6.4.9
splunkge6.5.0
splunklt6.5.6
splunkge6.6.0
splunklt6.6.3.2
splunkge7.0.0
splunklt7.0.0.1