CVE-2024-29945
Splunk Authentication Token Exposure in Debug Log in Splunk Enterprise
Severity
High 7.2
CVSS 3.1
Exploited
Not listed
EPSS
0.009
58.3th percentile
Discovered by
Not disclosed
Published
Mar 27, 2024
Assigned by splunk
Description
In Splunk Enterprise versions below 9.2.1, 9.1.4, and 9.0.9, the software potentially exposes authentication tokens during the token validation process. This exposure happens when either Splunk Enterprise runs in debug mode or the JsonWebToken component has been configured to log its activity at the DEBUG logging level.
Weakness: CWE-532
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Splunk Enterprise | SIEM & Log Management | affected-vendor |
Vendor-reported products (4)
- Splunk · Splunk Enterprise
- splunk · splunk
- splunk · splunk
- splunk · splunk
Credit
Alex Napier, Splunk