← CVE Intelligence

CVE-2022-26070

Error message discloses internal path PUBLISHED

Description (CNA)

When handling a mismatched pre-authentication cookie, the application leaks the internal error message in the response, which contains the Splunk Enterprise local system path. The vulnerability impacts Splunk Enterprise versions before 8.1.0.

Affected (CNA)

Vendor / productVersions
Splunk / Splunk Enterpriseaffected Version(s) before 8.1.0

CWE

CWE-200

References

ADP enrichment

CVE

No English description supplied.