CVE-2016-4857
Last modified
CVE-2016-4857 is a vulnerability of currently unknown severity. Open redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.2, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.x prior to 6.2.11 and Splunk Light prior to 6.4.2 allows to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.. EPSS estimates a 0.81% chance of exploitation in the next 30 days.
Description
Open redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.2, Splunk Enterprise 6.3.x prior to 6.3.6, Splunk Enterprise 6.2.x prior to 6.2.11 and Splunk Light prior to 6.4.2 allows to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Splunk | Splunk | <= 6.4.2 |
| Splunk | Splunk | 6.2.0 |
| Splunk | Splunk | 6.2.1 |
| Splunk | Splunk | 6.2.2 |
| Splunk | Splunk | 6.2.3 |
| Splunk | Splunk | 6.2.4 |
| Splunk | Splunk | 6.2.5 |
| Splunk | Splunk | 6.2.6 |
| Splunk | Splunk | 6.2.7 |
| Splunk | Splunk | 6.2.8 |
| Splunk | Splunk | 6.2.9 |
| Splunk | Splunk | 6.2.10 |
| Splunk | Splunk | 6.3.0 |
| Splunk | Splunk | 6.3.1 |
| Splunk | Splunk | 6.3.2 |
| Splunk | Splunk | 6.3.3 |
| Splunk | Splunk | 6.3.4 |
| Splunk | Splunk | 6.3.5 |
| Splunk | Splunk | 6.4.0 |
| Splunk | Splunk | 6.4.1 |
References
- https://jvn.jp/en/jp/JVN39926655/index.htmlThird Party Advisory, VDB Entry
- https://www.splunk.com/view/SP-CAAAPQMVendor Advisory
- https://jvn.jp/en/jp/JVN39926655/index.htmlThird Party Advisory, VDB Entry
- https://www.splunk.com/view/SP-CAAAPQMVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-4857?
How severe is CVE-2016-4857?
How do I fix CVE-2016-4857?
Are you affected by CVE-2016-4857?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST