Splunk accidentally exposes user passwords

Splunk has issued a warning to some of its users that their passwords were accidentally exposed in clear text.

In a message sent to Splunk users, Lionel Hartmann, VP of support for the company, confirmed that some debug code was unintentionally implemented on the production splunk.com website which exposed a small number of passwords in its web server's error log.

He said: “The splunk.com team has corrected the issue and has improved their change process to prevent similar issues from occurring in the future. In an abundance of caution, we have reset all affected users' passwords and cleared all affected users' active sessions on splunk.com.”