The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2024-1009 advisory.

  - In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6, the software potentially exposes plaintext     passwords for local native authentication Splunk users. This exposure could happen when you configure the     Splunk Enterprise AdminManager log channel at the DEBUG logging level. (CVE-2024-45739)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Splunk Enterprise 9.1.0 < 9.1.6, 9.2.0 < 9.2.3, 9.3.0 < 9.3.1 (SVD-2024-1009)

medium Nessus Plugin ID 208940

Version 1.2

Version 1.1

Version 1.2 Oct 18, 2024, 12:11 PM IAVM reference STIG Severity (set to "I") Plugin Feed: 202410181211
Version 1.1 Oct 14, 2024, 7:37 PM New Plugin Feed: 202410141937