CVE-2024-45739
Sensitive information disclosure in AdminManager logging channel
Severity
Medium 4.9
CVSS 3.1
Exploited
Not listed
EPSS
0.005
41.0th percentile
Discovered by
Not disclosed
Published
Oct 14, 2024
Assigned by splunk
Description
In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6, the software potentially exposes plaintext passwords for local native authentication Splunk users. This exposure could happen when you configure the Splunk Enterprise AdminManager log channel at the DEBUG logging level.
Weakness: CWE-200
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Splunk Enterprise | SIEM & Log Management | affected-vendor |
Vendor-reported products (1)
- Splunk · Splunk Enterprise
Credit
Eric McGinnis, Splunk