VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Mar 11, 2026· Updated Jun 17, 2026

CVE-2026-20164

CVE-2026-20164

Description

In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.9, and 9.3.10, and Splunk Cloud Platform versions below 10.2.2510.5, 10.1.2507.16, 10.0.2503.11, and 9.3.2411.123, a low-privileged user that does not hold the "admin" or "power" Splunk roles could access the /splunkd/__raw/servicesNS/-/-/configs/conf-passwords REST API endpoint, which exposes the hashed or plaintext password values that are stored in the passwords.conf configuration file due to improper access control. This vulnerability could allow for the unauthorized disclosure of sensitive credentials.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Splunk/Splunk
    cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*
    Range: >=9.3.0,<9.3.10
  • Splunk/Splunk Cloud Platform3 versions
    cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*range: >=9.3.2411,<9.3.2411.123
    • (no CPE)range: <10.2.2510.5, <10.1.2507.16, <10.0.2503.11, <9.3.2411.123
    • (no CPE)range: 10.2.2510
  • Splunk/Splunk Enterprisellm-fuzzy2 versions
    <10.2.0, <10.0.3, <9.4.9, <9.3.10+ 1 more
    • (no CPE)range: <10.2.0, <10.0.3, <9.4.9, <9.3.10
    • (no CPE)range: 10.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.