#VU7211 Spoofing attack in Splunk Light and Splunk Enterprise
Published: June 27, 2017 / Updated: October 22, 2018
Vulnerability identifier: #VU7211
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: N/A
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerable software:
Splunk Light
Splunk Enterprise
Splunk Light
Splunk Enterprise
Software vendor:
Splunk Inc.
Splunk Inc.
Description
The vulnerability allows a remote attacker to perform spoofing attack.
The vulnerability exists due to improper validation of user-supplied input. A remote attacker can create a specially crafted web page, trick the victim into visiting it and conduct URL spoofing attacks.
Successful exploitation of the vulnerability results in error message content spoofing.
Remediation
Update Splunk Enterprise to version 5.0.19, 6.0.15, 6.1.14, 6.2.14, 6.3.11, 6.4.7, 6.5.3.
Update Splunk Light to version 6.5.3.
Update Splunk Light to version 6.5.3.