Pipeline disclosure via unauthenticated REST endpoint

Missing authentication in a Splunk Enterprise 10.4 Edge Processor REST endpoint before 10.4.2 allows remote attackers to read pipeline configurations. The Edge Processor service endpoint returns pipeline configuration contents without requiring a provable user identity, so unauthenticated REST requests can obtain configuration details exposed by the control plane. Reachability requires Edge Processor to be enabled, which Splunk documents as disabled by default; the published impact is limited to disclosure of pipeline configuration information.