Open Redirect Vulnerability in Splunk Enterprise by Splunk
CVE-2016-4859
6.1MEDIUM
What is CVE-2016-4859?
An open redirect vulnerability exists in Splunk Enterprise versions prior to 6.4.3 for various product lines, including Splunk Light. This flaw allows attackers to redirect legitimate users to malicious websites, potentially facilitating phishing attacks. The vulnerability arises from unspecified vectors that do not properly validate URL inputs, posing a significant risk to users and the integrity of their data.
Affected Version(s)
Splunk Enterprise 6.4.x prior to 6.4.3
Splunk Enterprise 6.3.x prior to 6.3.6
Splunk Enterprise 6.2.x prior to 6.2.10