CVE-2024-23677
Server Response Disclosure in RapidDiag Salesforce.com Log File
Severity
Medium 4.3
CVSS 3.1
Exploited
Not listed
EPSS
0.004
32.9th percentile
Discovered by
Not disclosed
Published
Jan 22, 2024
Assigned by splunk
Description
In Splunk Enterprise versions below 9.0.8, the Splunk RapidDiag utility discloses server responses from external applications in a log file.
Weakness: CWE-532
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Splunk Cloud Platform | SIEM & Log Management | affected-vendor |
| Cisco | Splunk Enterprise | SIEM & Log Management | affected-vendor |
Vendor-reported products (2)
- Splunk · Splunk Enterprise
- Splunk · Splunk Cloud
Credit
Vikram Ashtaputre, Splunk