CVE-2024-45739

4.9 mediumEPSS 0.5%

Medium (4.9) in splunk splunk. EPSS 0.5% chance of exploitation in the next 30 days.

In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6, the software potentially exposes plaintext passwords for local native authentication Splunk users. This exposure could happen when you configure the Splunk Enterprise AdminManager log channel at the DEBUG logging level.

Severity

CVSS 3.1

4.9 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
CWEs: CWE-532, CWE-200
Published: 2024-10-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

splunk:splunk

References

https://advisory.splunk.com/advisories/SVD-2024-1009
https://research.splunk.com/application/93dc7182-c5da-4085-82ec-401abf33d623/

Check your stack JSON