CVE coverage
View on NVD →
CVE-2024-45738
CVSS 4.9
1 detection found
In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6, the software potentially exposes sensitive HTTP parameters to the `_internal` index. This exposure could happen if you configure the Splunk Enterprise `REST_Calls` log channel at the DEBUG logging level.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| splunk | Splunk Sensitive Information Disclosure in DEBUG Logging Channels | production | 2026-05-14 |