CVE-2017-5607

LOW

Description

Splunk Enterprise 5.0.x before 5.0.18, 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.13.1, 6.3.x before 6.3.10, 6.4.x before 6.4.6, and 6.5.x before 6.5.3 and Splunk Light before 6.5.2 assigns the $C JS property to the global Window namespace, which might allow remote attackers to obtain sensitive logged-in username and version-related information via a crafted webpage.

References

http://hyp3rlinx.altervista.org/advisories/SPLUNK-ENTERPRISE-INFORMATION-THEFT.txt

http://seclists.org/fulldisclosure/2017/Mar/89

http://www.securityfocus.com/archive/1/540346/100/0/threaded

http://www.securityfocus.com/bid/97265

http://www.securityfocus.com/bid/97286

http://www.securitytracker.com/id/1038170

https://www.exploit-db.com/exploits/41779/

https://www.splunk.com/view/SP-CAAAPZ3#InformationLeakageviaJavaScriptCVE20175607

Details

Source: MITRE

Published: 2017-04-10

Updated: 2019-03-20

Type: CWE-200

Risk Information

CVSS v2.0

Base Score: 3.5

Vector: AV:N/AC:M/Au:S/C:P/I:N/A:N

Impact Score: 2.9

Exploitability Score: 6.8

Severity: LOW

CVSS v3.0

Base Score: 3.5

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Impact Score: 1.4

Exploitability Score: 2.1

Severity: LOW