CVE-2018-11409 | BDVDB-2026-102113 Detail

Description#

Splunk through 7.0.1 allows information disclosure by appending __raw/services/server/info/server-info?output_mode=json to a query, as demonstrated by discovering a license key.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/kofa2002/splunk
http://www.securitytracker.com/id/1041148
https://www.exploit-db.com/exploits/44865/

Exploit#

https://www.exploit-db.com/exploits/44865/

History#

Version 12018-06-08Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.