When handling a mismatched pre-authentication cookie, the application leaks the internal error message in the response, which contains the Splunk Enterprise local system path. The vulnerability impacts Splunk Enterprise versions prior to 8.1.0.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
splunk splunk |
Vulmon