CVE-2024-23677

In Splunk Enterprise versions below 9.0.8, the Splunk RapidDiag utility discloses server responses from external applications in a log file.

Score

CVSS 3.1 5.3 Medium

Status

Modified - prodsec@splunk.com

Published

2024-01-22

Last modified

2025-02-28

Weaknesses

CWE-532

Affected products

• Cloud (Splunk)
• Splunk (Splunk)
• Splunk Cloud (Splunk)
• Splunk Enterprise (Splunk)

References

• https://advisory.splunk.com/advisories/SVD-2024-0107