CVE-2017-17067 Splunk Web in Splunk Enterprise 7.0.x before 7.0.0.1, 6.6.x before 6.6.3.2, 6.5.x before 6.5.6, 6.4.x before 6.4.9, and 6.3.x before 6.3.12, when the SAML authType is enabled, mishandles SAML, which a...
CriticalCVSS 9.8
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Splunk Web in Splunk Enterprise 7.0.x before 7.0.0.1, 6.6.x before 6.6.3.2, 6.5.x before 6.5.6, 6.4.x before 6.4.9, and 6.3.x before 6.3.12, when the SAML authType is enabled, mishandles SAML, which allows remote attackers to bypass intended access restrictions or conduct impersonation attacks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| splunk | >= 6.3.0, < 6.3.12 | 6.3.12 |
| splunk | >= 6.4.0, < 6.4.9 | 6.4.9 |
| splunk | >= 6.5.0, < 6.5.6 | 6.5.6 |
| splunk | >= 6.6.0, < 6.6.3.2 | 6.6.3.2 |
| splunk | >= 7.0.0, < 7.0.0.1 | 7.0.0.1 |
References
- 102005 third-party-advisory vdb-entry
- www.splunk.com vendor-advisory