Test ID:	1.3.6.1.4.1.25623.1.0.106715
Category:	Web application abuses
Title:	Splunk Enterprise Information Disclosure Vulnerability (SP-CAAAPZ3)
Summary:	Splunk Enterprise is prone to an information disclosure; vulnerability via JavaScript.
Description:	Summary: Splunk Enterprise is prone to an information disclosure vulnerability via JavaScript. Vulnerability Insight: Splunk Enterprise is affected by a vulnerability that could allow a remote attacker to obtain logged-in username and Splunk version-related information via JavaScript. Affected Software/OS: Splunk Enterprise 5.0.x, 6.0.x, 6.1.x, 6.2.x, 6.3.x, 6.4.x and 6.5.x. Solution: Update to version 5.0.18, 6.0.14, 6.1.13, 6.2.13, 6.3.10, 6.4.6, 6.5.3 or later. CVSS Score: 3.5 CVSS Vector: AV:N/AC:M/Au:S/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-5607 BugTraq ID: 97265 http://www.securityfocus.com/bid/97265 BugTraq ID: 97286 http://www.securityfocus.com/bid/97286 Bugtraq: 20170401 Splunk Enterprise Information Theft CVE-2017-5607 (Google Search) http://www.securityfocus.com/archive/1/540346/100/0/threaded https://www.exploit-db.com/exploits/41779/ http://seclists.org/fulldisclosure/2017/Mar/89 http://hyp3rlinx.altervista.org/advisories/SPLUNK-ENTERPRISE-INFORMATION-THEFT.txt http://www.securitytracker.com/id/1038170
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.