CVE-2024-23677

—

CVSS 3.1

5.3 medium

EPSS

<1%p33

Published

Jan 22, 2024 (Jan 22, 2024)

Modified

Jun 17, 2026

Description

In Splunk Enterprise versions below 9.0.8, the Splunk RapidDiag utility discloses server responses from external applications in a log file.

Vendors: splunk
Products: cloud, splunk
Weakness: CWE-532
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news1 stories

Splunk fixed high

Security AffairsJan 24, 08:35 UTC · Jan 24, 2024Vulnerability CVE-2024-23678 CVE-2024-23677 CVE-2024-23676+1 CVEs

47