Splunk Webex App up to 2.2.0 Schedule Meeting Action Password information disclosure

Summaryinfo

A vulnerability was found in Splunk Webex App up to 2.2.0 and classified as problematic. Affected by this issue is some unknown functionality of the component Schedule Meeting Action. Executing a manipulation of the argument Password can lead to information disclosure. This vulnerability is registered as CVE-2026-76379. It is possible to launch the attack remotely. No exploit is available.

Detailsinfo

A vulnerability was found in Splunk Webex App up to 2.2.0. It has been declared as problematic. This vulnerability affects an unknown code of the component Schedule Meeting Action. The manipulation of the argument password with an unknown input leads to a information disclosure vulnerability. The CWE definition for the vulnerability is CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. As an impact it is known to affect confidentiality. CVE summarizes:

In versions below 2.2.1 of the Cisco Webex app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive meeting password by invoking the schedule meeting action, because the action's password parameter is not masked and is shown in cleartext in the user interface. The information disclosure is possible because the app does not mark the affected action parameter as a password. For more information see Run an action in Splunk SOAR (https://help.splunk.com/en/splunk-soar/soar-on-premises/use-splunk-soar-on-premises/8.6.0/use-the-command-line-interface-to-perform-tasks-in-splunk-soar-on-premises/run-an-action-in-splunk-soar-on-premises).

The advisory is shared for download at advisory.splunk.com. This vulnerability was named CVE-2026-76379 since 08/19/2026. The exploitation appears to be easy. The attack can be initiated remotely. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1592.

Upgrading to version 2.2.1 eliminates this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Log Management Software

Vendor

• Splunk

Name

• Webex App

Version

• 2.0
• 2.1
• 2.2.0

License

• free

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion