topic Re: Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in Security

Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors

anilt2645 — Fri, 26 Aug 2016 10:26:50 GMT

Hi ,

Currently we are working on Vulnerabilities listed below.

CVE-2013-6870 and CVE-2013-6998
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6870
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6998

Could any help to find the patch for the above Vulnerable's.

Thanks & Regards,
Anil

Re: Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors

martin_mueller — Fri, 26 Aug 2016 11:40:17 GMT

CVE-2013-6998 has been fixed in 5.0.6: https://www.splunk.com/view/SP-CAAAJCD
Based on the description of CVE-2013-6870 I'd say this has been fixed in 5.0.6 as well.

To get your environment patched you just need to upgrade to 5.0.6 or later.

Re: Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors

anilt2645 — Fri, 26 Aug 2016 12:50:22 GMT

Instead of upgrading to 5.0.6 , is there any specific patch for this fix? Because package 5.0.6 will be having to many issues fixed in that version . So instead of taking all the changes looking for specific fix.

Could you please help us on same.

Re: Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors

martin_mueller — Fri, 26 Aug 2016 15:55:41 GMT

5.0.6 is a couple of years old, I'd recommend upgrading to 6.4.3 - you will get many more security issues fixed, new features, improved performance, etc.

If there is a patch just for this thing alone you'll need to go through support... though I'll predict their response, there really is no reason to stay on 5.0.x.

Re: Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors

dwaddle — Fri, 26 Aug 2016 16:57:42 GMT

Splunk does not issue generally available specific tiny patches for specific issues. Maintenance releases are cumulative. You REALLY should be working toward getting onto modern versions of the product. Soon, 5.0 will be out of support entirely.