CVE-2024-29945CWE-532

Splunk Authentication Token Exposure in Debug Log in Splunk Enterprise

High · published March 27, 2024

CVSS v3.1
7.2
EPSS
1%
Percentile
60.9
In the wild
Unconfirmed
What it is

In Splunk Enterprise versions below 9.2.1, 9.1.4, and 9.0.9, the software potentially exposes authentication tokens during the token validation process. This exposure happens when either Splunk Enterprise runs in debug mode or the JsonWebToken component has been configured to log its activity at the DEBUG logging level.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00950 · 60.9th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2024-03-27T16:16Z
EPSS history
Timeline
  • 27 MAR 16:16Z
    Splunk Authentication Token Exposure in Debug Log in Splunk Enterprise
    cvelistv5