title: Sensitive Information Disclosure to Internal Log Files in Splunk Add-on Builder
description: In Splunk Add-on Builder versions below 4.1.4, the app writes sensitive information to internal log files.
problem types: Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.
affected:
{
product: Splunk Add-on Builder
vendor: Splunk
versions:
version: -, status: affected, versionType: custom, lessThan: 4.1.4
}
metrics:
cvssV3_1: [
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L
version: 3.1
baseScore: 8.2
baseSeverity: HIGH
]
format: CVSS
scenarios: GENERAL