Lucene search
K

U.S. Dept Of Defense: Splunk Sensitive Information Disclosure @████████

🗓️ 03 Feb 2023 07:36:53Reported by spell1Type 
hackerone
 hackerone
🔗 hackerone.com👁 178 Views

Splunk Sensitive Information Disclosure @████████. Allows info disclosure by appending "__raw/services/server/info/server-info?output_mode=json" to a query, as demonstrated by finding a license key. Impact: Sensitive information disclosure

Related
ReporterTitlePublishedViews
Family
0day.today
Splunk < 7.0.1 - Information Disclosure Vulnerability
9 Jun 201800:00
zdt
Circl
CVE-2018-11409
28 Dec 202316:51
circl
CNVD
Splunk Information Disclosure Vulnerability
11 Jun 201800:00
cnvd
CVE
CVE-2018-11409
8 Jun 201812:00
cve
Cvelist
CVE-2018-11409
8 Jun 201812:00
cvelist
Exploit DB
Splunk &lt; 7.0.1 - Information Disclosure
8 Jun 201800:00
exploitdb
exploitpack
Splunk 7.0.1 - Information Disclosure
8 Jun 201800:00
exploitpack
Metasploit
Splunk __raw Server Info Disclosure
28 Dec 202319:50
metasploit
Nuclei
Splunk <=7.0.1 - Information Disclosure
4 Jun 202603:48
nuclei
NVD
CVE-2018-11409
8 Jun 201812:29
nvd
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

13 Feb 2023 11:58Current
4.9Medium risk
Vulners AI Score4.9
CVSS 25
CVSS 35.3
EPSS0.92221
178