PT-2019-17834 · Splunk · Splunk Enterprise+1

Publicado 2019-02-21 · Atualizado 2019-02-22 · CVE-2019-5727

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions 6.0.x through 6.5.x Splunk Light version 6.6.0 and earlier

Description The issue is related to Persistent XSS.

Recommendations For Splunk Enterprise versions 6.0.x through 6.5.x, update to a version after 6.5.5, 6.4.9, 6.3.12, 6.2.14, 6.1.14, or 6.0.15 respectively. For Splunk Light version 6.6.0 and earlier, update to a version after 6.6.0.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-5727

Produtos afetados

Splunk Enterprise

Splunk Light

Referências · 4

• https://splunk.com/view/SP-CAAAQAF · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-5727 · Aviso do Fabricante
• http://securityfocus.com/bid/107113 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-5727 · Nota de Segurança