An exploited Splunk Enterprise flaw let unauthenticated attackers create or truncate arbitrary files through a PostgreSQL sidecar endpoint.