Directory traversal vulnerability in the Splunk Django App in Splunk Enterprise 6.0.x before 6.0.14 6.1.x before 6.1.13 6.2.x before 6.2.14 6.3.x before 6.3.10 6.4.x before 6.4.6 and 6.5.x before 6.5.3; and Splunk Light before 6.6.0 allows remote authenticated users to read arbitrary files via unspecified vectors.