7.5Hoch
CVE-2026-20239Sensitive Information Disclosure through Log Files in Splunk Enterprise
Beschreibung
In Splunk Enterprise versions below 10.2.2 and 10.0.5, and Splunk Cloud Platform versions below 10.3.2512.8, 10.2.2510.11, 10.1.2507.21, and 10.0.2503.13, a user with a role that has access to the `_internal` index could view session cookies and response bodies that contain sensitive data.
Schwachstellentyp (CWE):
CWE-532
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| splunk | splunk | 10.0.0 – < 10.0.5 | |
| Splunk | Splunk Cloud Platform | 10.3.2512 – < 10.3.2512.8, 10.2.2510 – < 10.2.2510.11, 10.1.2507 – < 10.1.2507.21, 10.0.2503 – < 10.0.2503.13 | |
| Splunk | Splunk Enterprise | 10.2 – < 10.2.2, 10.0 – < 10.0.5 |
Referenzen und Patches
- https://advisory.splunk.com/advisories/SVD-2026-0503 Vendor Advisory
CPE-Treffer (NVD) (6)
cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*≥ 10.0.0 < 10.0.5cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*≥ 10.2.0 < 10.2.2cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*≥ 10.0.2503 < 10.0.2503.13cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*≥ 10.1.2507 < 10.1.2507.21cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*≥ 10.2.2510 < 10.2.2510.11cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*≥ 10.3.2512 < 10.3.2512.8