In Splunk Enterprise versions below 10.2.0, 10.0.2, 9.4.7, 9.3.9, and 9.2.11, a user of a Splunk Search Head Cluster (SHC) deployment who holds a role with access to the Splunk _internal index could view the RSA accessKey value from the <u>Authentication.conf</u> file, in plain text.
Exploitability
AV:AAC:LPR:HUI:NScope
S:UImpact
C:HI:HA:H6.8/CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HInformation Disclosure