Splunk Enterprise Information Disclosure Vulnerability

Last Update Date: 20 Jun 2018 10:02 Release Date: 20 Jun 2018 4845 Views

RISK: Medium Risk

TYPE: Security software and application - Security Software & Appliance

Multiple vulnerabilities have been identified in Splunk Enterprise. A remote user can exploit this vulnerability to trigger sensitive information disclosure on the targeted system.

Impact

Information Disclosure

System / Technologies affected

Versions 6.2.x, 6.3.x, 6.4.x and 6.5.x

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Upgrade to Splunk Enterprise latest version.

Vulnerability Identifier

CVE-2018-11409

Source

Splunk