CVEFinder.io

CVE-2026-20298

🔶 medium
🔍 Scan for this CVE
Summary

In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.6, 10.3.2512.15, 10.2.2510.18, and 10.1.2507.24, a low-privileged user that does not hold the 'admin' or 'power' Splunk roles could view stored credential hashes when they access the `/servicesNS/-/-/storage/passwords` REST endpoint through the `|rest` Search Processing Language (SPL) command.<br><br>The exposure happens because the `|rest` SPL command returns t

Description

In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.6, 10.3.2512.15, 10.2.2510.18, and 10.1.2507.24, a low-privileged user that does not hold the 'admin' or 'power' Splunk roles could view stored credential hashes when they access the `/servicesNS/-/-/storage/passwords` REST endpoint through the `|rest` Search Processing Language (SPL) command.<br><br>The exposure happens because the `|rest` SPL command returns the `encr_password` field in the results of the `/servicesNS/-/-/storage/passwords` REST endpoint.

CVSS Score
5.3
Medium
EPSS Score
0.2
Exploit Probability
Published Date
2026-07-15
First Seen: 2026-07-16
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 19.5% of all 338,292 vulnerabilities in our database.

#272,300
Below average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Jul 15, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Total
Complete system compromise possible
SSVC data provided by CISA
Last Modified 2026-07-24
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE IDs (Weakness Types)
CWE-200

📦 Affected Products 8

Vendor Product Status Affected Versions
splunk splunk Affected
> 10.0.0 < 10.0.8
splunk splunk Affected
> 10.2.0 < 10.2.5
splunk splunk Affected
> 9.4.0 < 9.4.13
splunk splunk Affected
v10.4.0
splunk splunk_cloud_platform Affected
> 10.1.2507 < 10.1.2507.24
splunk splunk_cloud_platform Affected
> 10.2.2510 < 10.2.2510.18
splunk splunk_cloud_platform Affected
> 10.3.2512 < 10.3.2512.15
splunk splunk_cloud_platform Affected
> 10.4.2604 < 10.4.2604.6

🔗 References 1

https://advisory.splunk.com/advisories/SVD-2026-0704
Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-20296 ⚠️ high 8.3 0.2 In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.26... 2026-07-15
CVE-2026-20297 ⚠️ high 7.2 0.5 In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, 9.4.13, and 9.3.14, and Splunk Cloud Platform versions below... 2026-07-15
CVE-2026-20251 ⚠️ high 8.8 0.6 In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versions below 10.3.2512.1... 2026-06-10
CVE-2026-20252 ⚠️ high 7.6 0.3 In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.4.26... 2026-06-10
CVE-2026-20253 ⛔ critical 9.8 96.2 In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or tr... 2026-06-10
CVE-2026-20254 🔶 medium 5.7 0.3 In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, and Splunk Cloud Platform versions below 10.3.25... 2026-06-10
These CVEs affect the same products