Splunk Enterprise 6.0.x < 6.0.14 / 6.1.x < 6.1.13 / 6.2.x < 6.2.14 / 6.3.x < 6.3.11 / 6.4.x < 6.4.8 / 6.5.x < 6.5.3 or Splunk Light < 6.6.0 Multiple Vulnerabilities

According to its self-reported version number, the version of Splunk running on the remote web server is Splunk Light prior to 6.6.0 or Splunk Enterprise 6.0.x prior to 6.0.14, 6.1.x prior to 6.1.13, 6.2.x prior to 6.2.14, 6.3.x prior to 6.3.11, 6.4.x prior to 6.4.8, or 6.5.x prior to 6.5.3. It i...

CVE-2018-7431

Directory traversal vulnerability in the Splunk Django App in Splunk Enterprise 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.4.6, and 6.5.x before 6.5.3; and Splunk Light before 6.6.0 allows remote authenticated users to read arbitrary files v...

CVE-2018-7431

The provided data confirm CVE-2018-7431 affects Splunk Enterprise and Splunk Light: directory traversal vulnerability in the Splunk Django App allowing an authenticated, remote user to read arbitrary files via unspecified vectors. Affected software/families include Splunk Enterprise 6.0.x before ...