Home

Description

In Splunk Enterprise versions below 10.2.2 and 10.0.5, and Splunk Cloud Platform versions below 10.3.2512.8, 10.2.2510.11, 10.1.2507.21, and 10.0.2503.13, a user with a role that has access to the `_internal` index could view session cookies and response bodies that contain sensitive data.

PUBLISHED Reserved 2025-10-08 | Published 2026-05-20 | Updated 2026-05-20 | Assigner cisco




HIGH: 7.5CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Problem types

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

Product status

10.2 (custom) before 10.2.2
affected

10.0 (custom) before 10.0.5
affected

10.3.2512 (custom) before 10.3.2512.8
affected

10.2.2510 (custom) before 10.2.2510.11
affected

10.1.2507 (custom) before 10.1.2507.21
affected

10.0.2503 (custom) before 10.0.2503.13
affected

Credits

Charlie Huggard, Splunk

References

advisory.splunk.com/advisories/SVD-2026-0503

cve.org (CVE-2026-20239)

nvd.nist.gov (CVE-2026-20239)

Download JSON