Splunk Enterprise Missing Authentication for Critical Function Vulnerability

What happened

Splunk Enterprise contains a missing authentication for critical function vulnerability which could allow an unauthenticated user to create or truncate arbitrary files through a PostgreSQL sidecar service endpoint.

Affected versions

Enterprise: 10.2 through before 10.2.4 (custom); 10.0 through before 10.0.7 (custom) Fixed: See vendor advisory.

Why it matters

This source correlation may provide earlier visibility while structured CVE metadata is still being updated.

Detection & mitigation

• Review the original advisory and validate affected versions.
• Apply vendor-provided updates or mitigations when available.