Threats Tagged 'cve-2026-76260'

Splunk heeft meerdere kwetsbaarheden verholpen in Splunk Enterprise, specifiek in versies vóór 10.4.2, 10.2.6, 10.0.9 en 9.4.14.

In certain versions of Splunk Enterprise prior to 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user with a role assigned the rest_properties_get capability could read encrypted stored credentials via the REST API. This occurs because the REST endpoint incorrectly requires rest_properties_get instead of the more restrictive list_storage_passwords capability to access stored credentials. Exploitation could expose sensitive data protected by these credentials.

CVE-2026-76260 is a vulnerability in Splunk Enterprise that allows users with the rest_properties_get capability to read encrypted stored credentials via the REST API. This occurs because the permissions for accessing stored credentials are incorrectly assigned, permitting unintended access. The issue affects multiple versions of Splunk Enterprise prior to specific fixed releases. Exploitation can expose sensitive data protected by these stored credentials.