CVEvulnerability
CVE-2017-17067
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2017-11-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-863
Description
Splunk Web in Splunk Enterprise 7.0.x before 7.0.0.1, 6.6.x before 6.6.3.2, 6.5.x before 6.5.6, 6.4.x before 6.4.9, and 6.3.x before 6.3.12, when the SAML authType is enabled, mishandles SAML, which allows remote attackers to bypass intended access restrictions or conduct impersonation attacks.
Affected configurations
• splunk splunk (>= 6.3.0 < 6.3.12)
• splunk splunk (>= 6.4.0 < 6.4.9)
• splunk splunk (>= 6.5.0 < 6.5.6)
• splunk splunk (>= 6.6.0 < 6.6.3.2)
• splunk splunk (>= 7.0.0 < 7.0.0.1)
Related
Weakness · CWE (1)
- CWE-863 Incorrect Authorization weakness
References
- http://www.securityfocus.com/bid/102005 Third Party Advisory, VDB Entry
- https://www.splunk.com/view/SP-CAAAP3K Vendor Advisory
- http://www.securityfocus.com/bid/102005 Third Party Advisory, VDB Entry
- https://www.splunk.com/view/SP-CAAAP3K Vendor Advisory