Indexed-data exposure via unsafeguarded SPL aliases

Improper input validation in Splunk Web allows attackers to expose indexed data through affected Splunk Enterprise and Cloud Platform releases. The collect command aliases lack the safeguarded-command designation, allowing a privileged search context to write confidential results into a summary index readable by less-privileged accounts. Exploitation requires Splunk Web and a higher-privileged user to initiate a browser request; the consequence is bounded to disclosure and limited writes in summary indexes.