Published: 30/11/2017 Updated: 03/10/2019

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 891

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Splunk Web in Splunk Enterprise 7.0.x prior to 7.0.0.1, 6.6.x prior to 6.6.3.2, 6.5.x prior to 6.5.6, 6.4.x prior to 6.4.9, and 6.3.x prior to 6.3.12, when the SAML authType is enabled, mishandles SAML, which allows remote malicious users to bypass intended access restrictions or conduct impersonation attacks.

Vulnerable Product	Search on Vulmon	Subscribe to Product
splunk splunk

Splunk software report with three related CVE.

Splunk-Defensive-Analysis Scientific paper about data management by Splunk software which, with three related CVE vulnerabilities analysis, is aimed to highlight Splunk reliability This project was made as an internet security relation at Univesity of Catania, Italy Please read documentation (italian) at docs CVE Details This report deals with the following CVE vulnerabilitie

Splunk software report with three related CVE.

Splunk-Defensive-Analysis Scientific paper about data management by Splunk software which, with three related CVE vulnerabilities analysis, is aimed to highlight Splunk reliability This project was made as an internet security relation at Univesity of Catania, Italy Please read documentation (italian) at docs CVE Details This report deals with the following CVE vulnerabilitie

Splunk software report with three related CVE.

Splunk-Defensive-Analysis Scientific paper about data management by Splunk software which, with three related CVE vulnerabilities analysis, is aimed to highlight Splunk reliability This project was made as an internet security relation at Univesity of Catania, Italy Please read documentation (italian) at docs CVE Details This report deals with the following CVE vulnerabilitie

CWE-863 https://www.splunk.com/view/SP-CAAAP3K http://www.securityfocus.com/bid/102005 https://nvd.nist.gov https://github.com/zMrSec/Splunk-Defensive-Analysis

CVE-2017-17067

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect