Information Disclosure in Venafi App for Splunk SOAR

CVE-2026-76385

What is CVE-2026-76385?

The Venafi app for Splunk SOAR, in versions prior to 2.1.4, allows users with action execution permissions to inadvertently expose sensitive keystore and private-key passwords. This occurs when executing the 'get certificate' action, as the action's parameters for keystore_password and password are displayed in plain text within the user interface. This lack of proper masking creates a significant risk of unauthorized access to sensitive credentials, as the parameters are not identified as password fields, leaving them vulnerable to exposure during standard operations.

References