Skip to content
OpenAdvisories
Medium · 5.0 CVE-2026-76375 EUVD-2026-62940GHSA-44mh-ph29-xgxx

Information Disclosure through Environment Data Logging in AD LDAP app for Splunk SOAR

Published Aug 19, 2026 · Updated Aug 20, 2026 · Assigned by cisco

Description

In versions below 2.3.8 of the AD LDAP app for Splunk SOAR, a user who holds a role with permission to run actions could expose sensitive credentials by invoking an action that causes the full connector process environment to be written to a persistent debug log file in plaintext. For more information see Run an action in Splunk SOAR (https://help.splunk.com/en/splunk-soar/soar-on-premises/use-splunk-soar-on-premises/8.6.0/use-the-command-line-interface-to-perform-tasks-in-splunk-soar-on-premises/run-an-action-in-splunk-soar-on-premises).

Affected products

VendorProductAffectedFixed
Splunk AD LDAP app for Splunk SOAR 2.3 – < 2.3.8 2.3.8

References