CVE-2024-23677: Server Response Disclosure in RapidDiag Salesforce.com Log File
4.3
CVSS
Description
In Splunk Enterprise versions below 9.0.8, the Splunk RapidDiag utility discloses server responses from external applications in a log file.
Classification
CVE ID: CVE-2024-23677
CVSS Base Severity: MEDIUM
CVSS Base Score: 4.3
Affected Products
Vendor: Splunk
Product: Splunk Enterprise
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.06% (probability of being exploited)
EPSS Percentile: 29.94% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)