10

CVE-2017-17067

Splunk Web in Splunk Enterprise 7.0.x before 7.0.0.1, 6.6.x before 6.6.3.2, 6.5.x before 6.5.6, 6.4.x before 6.4.9, and 6.3.x before 6.3.12, when the SAML authType is enabled, mishandles SAML, which allows remote attackers to bypass intended access restrictions or conduct impersonation attacks.

Data is provided by the National Vulnerability Database (NVD)
Splunk ≫ Splunk SwEditionenterprise Version >= 6.3.0 < 6.3.12
Splunk ≫ Splunk SwEditionenterprise Version >= 6.4.0 < 6.4.9
Splunk ≫ Splunk SwEditionenterprise Version >= 6.5.0 < 6.5.6
Splunk ≫ Splunk SwEditionenterprise Version >= 6.6.0 < 6.6.3.2
Splunk ≫ Splunk SwEditionenterprise Version >= 7.0.0 < 7.0.0.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 3.34% 0.868
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

http://www.securityfocus.com/bid/102005
Third Party Advisory
VDB Entry