medium5.3Public exploit code
CVE-2018-11409
Splunk through 7.0.1 allows information disclosure by appending __raw/services/server/info/server-info?output_mode=json to a query, as demonstrated by discover…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Splunk < 7.0.1 - Information Disclosure2018-06-08 · webapps · linux
Impact
Splunk through 7.0.1 allows information disclosure by appending __raw/services/server/info/server-info?output_mode=json to a query, as demonstrated by discovering a license key.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Splunk | Splunk | through 7.0.1 |