| Package | Affected versions | Patched versions |
|---|---|---|
| splunk | ≥ 10.0.0, < 10.0.5≥ 10.2.0, < 10.2.2 | 10.0.510.2.2 |
| splunk cloud platform | ≥ 10.0.2503, < 10.0.2503.13≥ 10.1.2507, < 10.1.2507.21≥ 10.2.2510, < 10.2.2510.11≥ 10.3.2512, < 10.3.2512.8 | 10.0.2503.1310.1.2507.2110.2.2510.1110.3.2512.8 |
In Splunk Enterprise versions below 10.2.2 and 10.0.5, and Splunk Cloud Platform versions below 10.3.2512.8, 10.2.2510.11, 10.1.2507.21, and 10.0.2503.13, a user with a role that has access to the `_internal` index could view session cookies and response bodies that contain sensitive data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free