← All advisories

Medium severity4.3NVD Advisory· Published Jan 22, 2024· Updated Jun 17, 2026

CVE-2024-23677

CVE-2024-23677

Description

In Splunk Enterprise versions below 9.0.8, the Splunk RapidDiag utility discloses server responses from external applications in a log file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

Splunk/Cloud
cpe:2.3:a:splunk:cloud:*:*:*:*:*:*:*:*
Range: <9.0.2208
Splunk/Splunk
cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*
Range: >=9.0.0,<9.0.8
Splunk/Splunk Enterprisellm-fuzzy2 versions
<9.0.8+ 1 more
- (no CPE)range: <9.0.8
- (no CPE)range: 9.0
Splunk/Splunk Cloud Platformcpe-rescue
Range: -

Patches

Vulnerability mechanics

References

1

advisory.splunk.com/advisories/SVD-2024-0107nvdVendor Advisory

News mentions

0

No linked articles in our index yet.