Skip to content

CVE-2018-11409 Splunk through 7.0.1 allows information disclosure by appending __raw/services/server/info/server-info?output_mode=json to a query, as demonstrated by discovering a license key.

MediumCVSS 5.3 EPSS 98.2% Framework module Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

Splunk through 7.0.1 allows information disclosure by appending __raw/services/server/info/server-info?output_mode=json to a query, as demonstrated by discovering a license key.

Affected products

ProductAffected versionsFixed in
splunk <= 7.0.1 No fix listed

References

  • 1041148 third-party-advisory vdb-entry
  • github.com exploit third-party-advisory
  • 44865 exploit third-party-advisory vdb-entry