Beveiligingsadvies

CVE-2022-26070

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-05-06 16:37:16
Laatst bijgewerkt 2024-08-03 04:56:37
Toegewezen door Splunk
CVSS-score 4.3
Status PUBLISHED

Beschrijving

When handling a mismatched pre-authentication cookie, the application leaks the internal error message in the response, which contains the Splunk Enterprise local system path. The vulnerability impacts Splunk Enterprise versions before 8.1.0.