Description
In Splunk Add-on Builder versions below 4.1.4, the app writes sensitive information to internal log files.
References (1)
Core 1
Core References
Vendor Advisory
https://advisory.splunk.com/advisories/SVD-2024-0111
Scores
CVSS v3
8.2
EPSS
0.0005
EPSS Percentile
16.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-532
Status
published
Products (1)
splunk/add-on_builder
< 4.1.4
Published
Jan 30, 2024
Tracked Since
Feb 18, 2026