CVE-2018-7431
EUVD-2018-1916223.10.2018, 21:31
Directory traversal vulnerability in the Splunk Django App in Splunk Enterprise 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.4.6, and 6.5.x before 6.5.3; and Splunk Light before 6.6.0 allows remote authenticated users to read arbitrary files via unspecified vectors.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| splunk | splunk | 𝑥 < 6.6.0 |
| splunk | splunk | 6.0.0 ≤ 𝑥 < 6.0.14 |
| splunk | splunk | 6.1.0 ≤ 𝑥 < 6.1.13 |
| splunk | splunk | 6.2.0 ≤ 𝑥 < 6.2.14 |
| splunk | splunk | 6.3.0 ≤ 𝑥 < 6.3.10 |
| splunk | splunk | 6.4.0 ≤ 𝑥 < 6.4.6 |
| splunk | splunk | 6.5.0 ≤ 𝑥 < 6.5.3 |
𝑥
= Vulnerable software versions