CVE-2023-32709

4.3 mediumEPSS 0.4%

Medium (4.3) in splunk. EPSS 0.4% chance of exploitation in the next 30 days.

In Splunk Enterprise versions below 9.0.5, 8.2.11. and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user who holds the ‘user’ role can see the hashed version of the initial user name and password for the Splunk instance by using the ‘rest’ SPL command against the ‘conf-user-seed’ REST endpoint.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
CWE: CWE-285
Published: 2023-06-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

splunk:splunk
splunk:splunk_cloud_platform

References

https://advisory.splunk.com/advisories/SVD-2023-0604
https://research.splunk.com/application/a1be424d-e59c-4583-b6f9-2dcc23be4875/
https://advisory.splunk.com/advisories/SVD-2023-0604
https://research.splunk.com/application/a1be424d-e59c-4583-b6f9-2dcc23be4875/

Check your stack JSON