CVE-2023-32709CWE-285

Low-privileged User can View Hashed Default Splunk Password

Medium · published June 1, 2023

CVSS v3.1
4.3
EPSS
0%
Percentile
32.0
In the wild
Unconfirmed
What it is

In Splunk Enterprise versions below 9.0.5, 8.2.11. and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user who holds the ‘user’ role can see the hashed version of the initial user name and password for the Splunk instance by using the ‘rest’ SPL command against the ‘conf-user-seed’ REST endpoint.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00391 · 32.0th percentile
Weakness
CWE-285 · Improper Authorization
Published
2023-06-01T16:34Z
EPSS history
Timeline
  • 01 JUN 16:34Z
    Low-privileged User can View Hashed Default Splunk Password
    cvelistv5