Test ID:	1.3.6.1.4.1.25623.1.0.809013
Category:	Web application abuses
Title:	Splunk Enterprise Open Redirection Vulnerability (SP-CAAAPQ6)
Summary:	Splunk Enterprise is prone to an open redirection; vulnerability.
Description:	Summary: Splunk Enterprise is prone to an open redirection vulnerability. Vulnerability Insight: The flaw is due to an unspecified input validation error. Vulnerability Impact: Successful exploitation of this vulnerability could permit an attacker to redirect a user to an attacker controlled website. Affected Software/OS: Splunk Enterprise versions 6.4.x before 6.4.3, 6.3.x before 6.3.6, 6.2.x before 6.2.10, 6.1.x before 6.1.11, 6.0.x before 6.0.12, 5.0.x before 5.0.16. Solution: Update to version 6.4.3, 6.3.6, 6.2.10, 6.1.11, 6.0.12, 5.0.16 or later. CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-4859 BugTraq ID: 92603 http://www.securityfocus.com/bid/92603 https://jvn.jp/en/jp/JVN64800312/index.html
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.