Splunk 6.2.3 through 7.0.1 allows information disclosure by appending /__raw/services/server/info/server-info?output_mode=json to a query. Versions 6.6.0 through 7.0.1 require authentication.
07708dd7f74b24739aca258afc9f5d706912acb38f18c511a0b86e93637db740
Splunk versions 6.2.3 through 7.0.1 suffer from an information disclosure vulnerability.
799e5977c37e92a4b8cae606ad19d8dfc60e9a513a80f2cef6e0a03e025ecdb6