CVE-2022-26070 — Error message discloses internal path
When handling a mismatched pre-authentication cookie, the application leaks the internal error message in the response, which contains the Splunk Enterprise local system path. T…
Published: 2022-05-06 · CVSS: 4.3 · CVSS 3.1
When handling a mismatched pre-authentication cookie, the application leaks the internal error message in the response, which contains the Splunk Enterprise local system path. The vulnerability impacts Splunk Enterprise versions before 8.1.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7