CVE-2024-23677
Server Response Disclosure in RapidDiag Salesforce.com Log File
Exploited
Not listed
EPSS
0.004
31.4th percentile
Discovered by
Not disclosed
Published
Jan 22, 2024
Assigned by splunk
Description
In Splunk Enterprise versions below 9.0.8, the Splunk RapidDiag utility discloses server responses from external applications in a log file.
Weakness: CWE-532
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Splunk Cloud Platform | SIEM & Log Management | affected-vendor |
| Cisco | Splunk Enterprise | SIEM & Log Management | affected-vendor |
Vendor-reported products (2)
- Splunk · Splunk Enterprise
- Splunk · Splunk Cloud
Credit
Vikram Ashtaputre, Splunk