VULNERABILITY INTELLIGENCE

CVE-2024-45739

CVSS score4.9 MEDIUM

EPSS probability0.51%

CISA KEVNot currently listed

Published2024-10-14

Last modified2026-06-17

Description

In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6, the software potentially exposes plaintext passwords for local native authentication Splunk users. This exposure could happen when you configure the Splunk Enterprise AdminManager log channel at the DEBUG logging level.