製品・ソフトウェアに関する情報

JVN脆弱性詳細

Splunk Enterprise および Splunk Light における重要なログインユーザ名およびバージョン関連情報を取得される脆弱性

Title	Splunk Enterprise および Splunk Light における重要なログインユーザ名およびバージョン関連情報を取得される脆弱性
Summary	Splunk Enterprise および Splunk Light は、$C JS プロパティをグローバルな Window 名前空間に割り当てるため、重要なログインユーザ名およびバージョン関連情報を取得される脆弱性が存在します。
Possible impacts	リモートの攻撃者により、巧妙に細工された Web ページを介して、重要なログインユーザ名およびバージョン関連情報を取得される可能性があります。
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	March 27, 2017, midnight
Registration Date	May 15, 2017, 4:04 p.m.
Last Update	May 15, 2017, 4:04 p.m.

Affected System

Splunk

Splunk Enterprise 5.0.18 未満の 5.0.x

Splunk Enterprise 6.0.14 未満の 6.0.x

Splunk Enterprise 6.1.13 未満の 6.1.x

Splunk Enterprise 6.2.13.1 未満の 6.2.x

Splunk Enterprise 6.3.10 未満の 6.3.x

Splunk Enterprise 6.4.6 未満の 6.4.x

Splunk Enterprise 6.5.3 未満の 6.5.x

Splunk Light 6.5.2 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2017-5607	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5607
National Vulnerability Database (NVD)
2	CVE-2017-5607	https://nvd.nist.gov/vuln/detail/CVE-2017-5607

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-200	https://jvndb.jvn.jp/ja/cwe/CWE-200.html

ベンダー情報

No	Name	URL
Splunk
1	SPL-134841	https://www.splunk.com/view/SP-CAAAPZ3#InformationLeakageviaJavaScriptCVE20175607

Change Log

No	Changed Details	Date of change
0	[2017年05月15日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2017-5607

Summary	Splunk Enterprise 5.0.x before 5.0.18, 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.13.1, 6.3.x before 6.3.10, 6.4.x before 6.4.6, and 6.5.x before 6.5.3 and Splunk Light before 6.5.2 assigns the $C JS property to the global Window namespace, which might allow remote attackers to obtain sensitive logged-in username and version-related information via a crafted webpage.
Publication Date	April 11, 2017, 12:59 a.m.
Registration Date	Jan. 26, 2021, 1:26 p.m.
Last Update	Nov. 21, 2024, 12:27 p.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:splunk:splunk:::::light:::*			6.5.1

Configuration2	or higher	or less	more than	less than
cpe:2.3:a:splunk:splunk:::::enterprise:::*	6.5.0			6.5.3
cpe:2.3:a:splunk:splunk:::::enterprise:::*	6.3.0			6.3.10
cpe:2.3:a:splunk:splunk:::::enterprise:::*	6.0.0			6.0.14
cpe:2.3:a:splunk:splunk:::::enterprise:::*	6.1.0			6.1.13
cpe:2.3:a:splunk:splunk:::::enterprise:::*	6.4.0			6.4.6
cpe:2.3:a:splunk:splunk:::::enterprise:::*	5.0.0			5.0.18
cpe:2.3:a:splunk:splunk:::::enterprise:::*	6.2.0			6.2.13.1

Related information, measures and tools

No	URL	タグ
1	http://hyp3rlinx.altervista.org/advisories/SPLUNK-ENTERPRISE-INFORMATION-THEFT.txt	Exploit Third Party Advisory
2	http://hyp3rlinx.altervista.org/advisories/SPLUNK-ENTERPRISE-INFORMATION-THEFT.txt	Exploit Third Party Advisory
3	http://seclists.org/fulldisclosure/2017/Mar/89	Exploit Mailing List Third Party Advisory
4	http://seclists.org/fulldisclosure/2017/Mar/89	Exploit Mailing List Third Party Advisory
5	http://www.securityfocus.com/archive/1/540346/100/0/threaded	Exploit Third Party Advisory VDB Entry
6	http://www.securityfocus.com/archive/1/540346/100/0/threaded	Exploit Third Party Advisory VDB Entry
7	http://www.securityfocus.com/bid/97265	Third Party Advisory VDB Entry
8	http://www.securityfocus.com/bid/97265	Third Party Advisory VDB Entry
9	http://www.securityfocus.com/bid/97286	Third Party Advisory VDB Entry
10	http://www.securityfocus.com/bid/97286	Third Party Advisory VDB Entry
11	http://www.securitytracker.com/id/1038170	Third Party Advisory VDB Entry
12	http://www.securitytracker.com/id/1038170	Third Party Advisory VDB Entry
13	https://www.exploit-db.com/exploits/41779/	Exploit Third Party Advisory VDB Entry
14	https://www.exploit-db.com/exploits/41779/	Exploit Third Party Advisory VDB Entry
15	https://www.splunk.com/view/SP-CAAAPZ3#InformationLeakageviaJavaScriptCVE20175607	Vendor Advisory
16	https://www.splunk.com/view/SP-CAAAPZ3#InformationLeakageviaJavaScriptCVE20175607	Vendor Advisory

Common Vulnerabilities List