JVN#39926655: Splunk Enterprise and Splunk Light vulnerable to open redirect

Splunk Enterprise and Splunk Light contain an open redirect vulnerability. Impact When accessing a specially crafted URL, the user may be redirected to an arbitrary website. As a result, the user may become a victim of a phishing attack. Solution Update the Software Update to the latest version...

Splunk Light Open Redirection Vulnerability

Splunk Light is prone to an open redirection vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:splunk:light";...

Splunk Light Remote Detection

Detects the installed version of Splunk Light. This script sends an HTTP GET request and tries to get the version from the response. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Splunk Enterprise < 5.0.16 / 6.0.12 / 6.1.11 / 6.2.10 / 6.3.6 / 6.4.3 or Splunk Light < 6.4.3 Cross-Site Redirection

According to its self-reported version number, the version of Splunk Enterprise hosted on the remote web server is 5.0.x prior to 5.0.16, 6.0.x prior to 6.0.12, 6.1.x prior to 6.1.11, 6.2.x prior to 6.2.10, 6.3.x prior to 6.3.6, or 6.4.x prior to 6.4.3; or else it is Splunk Light version 6.4.x...

CVE-2016-2298

Summary of CVE-2016-2298 (Meteocontrol WEB’log) : Affects WEB’log Basic 100, Light, Pro, and Pro Unlimited. The issue is Information Exposure via cleartext data stored or transmitted by the application, driven by an improper access control / authentication bypass vulnerability. Remote attackers c...

Splunk Enterprise < 5.0.15 / 6.0.11 / 6.1.10 / 6.2.9 / 6.3.3.4 or Splunk Light < 6.2.9 / 6.3.3.4 Multiple Vulnerabilities (DROWN)

According to its version number, the instance of Splunk hosted on the remote web server is Enterprise 5.0.x prior to 5.0.15, 6.0.x prior to 6.0.11, 6.1.x prior to 6.1.10, 6.2.x prior to 6.2.9, 6.3.x prior to 6.3.3.4, Light 6.2.x prior to 6.2.9, or Light 6.3.x prior to 6.3.3.4. It is, therefore,...

God of Light - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application God of Light published at the 'play' market has multiple vulnerabilities...

Flash light - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Flash light published at the 'play' market has multiple vulnerabilities...

Pivot Light Saber - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Pivot Light Saber published at the 'play' market has multiple vulnerabilities...

Disco Light™ LED Flashlight - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Disco Light™ LED Flashlight published at the 'play' market has multiple vulnerabilities...

Flash Light Alerts - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Flash Light Alerts published at the 'play' market has multiple vulnerabilities...

TF: Fast Light - Exported components, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application TF: Fast Light published at the 'play' market has multiple vulnerabilities...

Power Light - Flashlight LED - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Power Light - Flashlight LED published at the 'play' market has multiple vulnerabilities...

Clever Lotto Light - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Clever Lotto Light published at the 'play' market has multiple vulnerabilities...

Theme eXp - Black Z Light - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Theme eXp - Black Z Light published at the 'play' market has multiple vulnerabilities...

Sleep Tight Night Light - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Sleep Tight Night Light published at the 'play' market has multiple vulnerabilities...

Night Light - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Night Light published at the 'play' market has multiple vulnerabilities...

Light Flow Legacy - Dangerous filesystem permissions, Runtime privilege escalation, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Light Flow Legacy published at the 'play' market has multiple vulnerabilities...

Party Light - Free - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Party Light - Free published at the 'play' market has multiple vulnerabilities...

Sex Light LITE - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Sex Light LITE published at the 'play' market has multiple vulnerabilities...