https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T21:59:01.488974+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-32709 CVE-2023-32709 — Low-privileged User can View Hashed Default Splunk Password 2026-10-05T21:59:01.504971+00:00

Affected: Splunk Enterprise, Splunk Cloud Platform

In Splunk Enterprise versions below 9.0.5, 8.2.11. and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, a low-privileged user who holds the ‘user’ role can see the hashed version of the initial user name and password for the Splunk instance by using the ‘rest’ SPL command against the ‘conf-user-seed’ REST endpoint.