NVD

Id
84687  
Name
CVE-2017-5607  
Description
Splunk Enterprise 5.0.x before 5.0.18, 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.13.1, 6.3.x before 6.3.10, 6.4.x before 6.4.6, and 6.5.x before 6.5.3 and Splunk Light before 6.5.2 assigns the $C JS property to the global Window namespace, which might allow remote attackers to obtain sensitive logged-in username and version-related information via a crafted webpage.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-04-27  
Published
2017-04-10  
Modified Date
2017-04-17  
Seq
2017-5607  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
414034 84687 CVE-2017-5850 [openbsd-cvs] 20170131 cvs.openbsd.org: src  View
414035 84687 CVE-2017-5850 http://packetstormsecurity.com/files/140944/OpenBSD-HTTP-Server-6.0-Denial-Of-Service.html  View
414036 84687 CVE-2017-5850 20170206 Remote DoS against OpenBSD http server (up to 6.0)  View
414037 84687 CVE-2017-5850 [oss-security] 20170202 Re: CVE requests: OpenBSD httpd - 2 DoS  View
414038 84687 CVE-2017-5850 95997  View
414039 84687 CVE-2017-5850 1037758  View
414040 84687 CVE-2017-5850 https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/034_httpd.patch.sig  View
414041 84687 CVE-2017-5850 https://ftp.openbsd.org/pub/OpenBSD/patches/6.0/common/017_httpd.patch.sig  View
414042 84687 CVE-2017-5850 https://github.com/openbsd/src/commit/142cfc82b932bc211218fbd7bdda8c7ce83f19df  View
414043 84687 CVE-2017-5850 https://pierrekim.github.io/blog/2017-02-07-openbsd-httpd-CVE-2017-5850.html  View
414044 84687 CVE-2017-5850 41278  View
414045 84687 CVE-2017-5850 [openbsd-cvs] 20170131 cvs.openbsd.org: src  View
414046 84687 CVE-2017-5850 http://packetstormsecurity.com/files/140944/OpenBSD-HTTP-Server-6.0-Denial-Of-Service.html  View
414047 84687 CVE-2017-5850 20170206 Remote DoS against OpenBSD http server (up to 6.0)  View
414048 84687 CVE-2017-5850 [oss-security] 20170202 Re: CVE requests: OpenBSD httpd - 2 DoS  View
414049 84687 CVE-2017-5850 95997  View
414050 84687 CVE-2017-5850 1037758  View
414051 84687 CVE-2017-5850 https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/034_httpd.patch.sig  View
414052 84687 CVE-2017-5850 https://ftp.openbsd.org/pub/OpenBSD/patches/6.0/common/017_httpd.patch.sig  View
414053 84687 CVE-2017-5850 https://github.com/openbsd/src/commit/142cfc82b932bc211218fbd7bdda8c7ce83f19df  View
414054 84687 CVE-2017-5850 https://pierrekim.github.io/blog/2017-02-07-openbsd-httpd-CVE-2017-5850.html  View
414055 84687 CVE-2017-5850 41278  View
414056 84687 CVE-2017-5850 [openbsd-cvs] 20170131 cvs.openbsd.org: src  View
414057 84687 CVE-2017-5850 http://packetstormsecurity.com/files/140944/OpenBSD-HTTP-Server-6.0-Denial-Of-Service.html  View
414058 84687 CVE-2017-5850 20170206 Remote DoS against OpenBSD http server (up to 6.0)  View
414059 84687 CVE-2017-5850 [oss-security] 20170202 Re: CVE requests: OpenBSD httpd - 2 DoS  View
414060 84687 CVE-2017-5850 95997  View
414061 84687 CVE-2017-5850 1037758  View
414062 84687 CVE-2017-5850 https://ftp.openbsd.org/pub/OpenBSD/patches/5.9/common/034_httpd.patch.sig  View
414063 84687 CVE-2017-5850 https://ftp.openbsd.org/pub/OpenBSD/patches/6.0/common/017_httpd.patch.sig  View
414064 84687 CVE-2017-5850 https://github.com/openbsd/src/commit/142cfc82b932bc211218fbd7bdda8c7ce83f19df  View
414065 84687 CVE-2017-5850 https://pierrekim.github.io/blog/2017-02-07-openbsd-httpd-CVE-2017-5850.html  View
414066 84687 CVE-2017-5850 41278  View
417416 84687 CVE-2017-2460 97130  View
417417 84687 CVE-2017-2460 https://bugs.chromium.org/p/project-zero/issues/detail?id=1090  View
417418 84687 CVE-2017-2460 https://support.apple.com/HT207600  View
417419 84687 CVE-2017-2460 https://support.apple.com/HT207601  View
417420 84687 CVE-2017-2460 https://support.apple.com/HT207617  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
66764 JVNDB-2017-003089 Splunk Enterprise および Splunk Light における重要なログインユーザ名およびバージョン関連情報を取得される脆弱性 Splunk Enterprise および Splunk Light は、$C JS プロパティをグローバルな Window 名前空間に割り当てるため、重要なログインユーザ名およびバージョン関連情報を取得される脆弱性が存在します。 CVE-2017-5607 0 CVE-2017-5607 84687 4.3 4.3 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-003089.html 2017-03-27 2017-05-15 View