CVE-2026-20239 — Sensitive Information Disclosure through Log Files in Splunk Enterprise

CVE-2026-20239

Sensitive Information Disclosure through Log Files in Splunk Enterprise PUBLISHED

Description (CNA)

In Splunk Enterprise versions below 10.2.2 and 10.0.5, and Splunk Cloud Platform versions below 10.3.2512.8, 10.2.2510.11, 10.1.2507.21, and 10.0.2503.13, a user with a role that has access to the `_internal` index could view session cookies and response bodies that contain sensitive data.

Affected (CNA)

Vendor / product	Versions
Splunk / Splunk Enterprise	affected 10.2 before 10.2.2; affected 10.0 before 10.0.5
Splunk / Splunk Cloud Platform	affected 10.3.2512 before 10.3.2512.8; affected 10.2.2510 before 10.2.2510.11; affected 10.1.2507 before 10.1.2507.21; affected 10.0.2503 before 10.0.2503.13

CWE

CWE-532

References

https://advisory.splunk.com/advisories/SVD-2026-0503

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.