CVE-2018-11409

Splunk through 7.0.1 allows information disclosure by appending __raw/services/server/info/server-info?output_mode=json to a query, as demonstrated by…

published June 8, 2018

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.9th percentile for exploit probability.

CVSS
—
EPSS
98%
Percentile
99.9
In the wild
Unconfirmed
What it is

Splunk through 7.0.1 allows information disclosure by appending __raw/services/server/info/server-info?output_mode=json to a query, as demonstrated by discovering a license key.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.98221 · 99.9th percentile
Published
2018-06-08T12:00Z
EPSS history
Timeline
  • 08 JUN 12:00Z
    Splunk through 7.0.1 allows information disclosure by appending __raw/services/server/info/server-info?output_mode=json to a query, as demonstrated by…
    cvelistv5