CVE-2026-76378: The application stores sensitive information in cleartext within a resource that might be accessible to another control sphere. in Splunk Cisco Secure Malware Analytics app for Splunk SOAR

In the Cisco Secure Malware Analytics app for Splunk SOAR versions >=2.4 and <2.4.5, the detonate file action exposes the sample_password parameter in cleartext within the user interface. This occurs because the parameter is not designated as a password field, leading to potential information disclosure to users who have permission to run actions. The vulnerability does not require user interaction and has a CVSS 3.1 base score of 4.3, indicating a medium impact on confidentiality without affecting integrity or availability.

An attacker or user with permission to run actions in the affected app versions can view sensitive sample passwords in cleartext. This exposure could lead to unauthorized access if the password is reused or leveraged elsewhere. There is no impact on system integrity or availability reported.

A fixed version 2.4.5 or later should be applied to address this issue. Since the vulnerability is due to the sample_password parameter not being masked, upgrading to a version where this is corrected will prevent cleartext exposure. No temporary or alternative mitigations are indicated in the provided data.