Splunk: CVE-2024-45738: Sensitive information disclosure in REST_Calls logging channel

In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6, the software potentially exposes sensitive parameters in HTTP GET requests such as plaintext credentials to the_internalindex. This exposure could happen if you configure the Splunk EnterpriseREST_Callslog channel at the DEBUG logging level.The vulnerability would require either local access to the log files or administrative access to internal indexes, which by default only the admin role receives. Review roles and capabilities on your instance and restrict internal index access to administrator-level roles. SeeDefine roles on the Splunk platform with capabilitiesin the Splunk documentation for more information.