Test ID:	1.3.6.1.4.1.25623.1.0.106264
Category:	Web application abuses
Title:	Splunk Enterprise 6.2.x < 6.2.11, 6.3.x < 6.3.6, 6.4.x < 6.4.2 Open Redirect Vulnerability
Summary:	Splunk Enterprise is prone to an open redirect vulnerability.
Description:	Summary: Splunk Enterprise is prone to an open redirect vulnerability. Vulnerability Insight: Splunk Enterprise is affected by a vulnerability that could permit an attacker to redirect a user to an attacker controlled website. Vulnerability Impact: When accessing a specially crafted URL, the user may be redirected to an arbitrary website. As a result, the user may become a victim of a phishing attack. Affected Software/OS: Splunk Enterprise versions 6.2.x through 6.4.x. Solution: Update to version 6.4.2, 6.3.6, 6.2.11 or later. CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-4857 https://jvn.jp/en/jp/JVN39926655/index.html
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.