EUVD-2021-18456

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Crafted request bypasses TCP Token authentication in Splunk Indexer versions before 8.1.5 and 8.2.1

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2021-31559	6 May 202220:23	–	circl
CNNVD	Splunk Enterprise 授权问题漏洞	5 May 202200:00	–	cnnvd
CVE	CVE-2021-31559	6 May 202216:35	–	cve
Cvelist	CVE-2021-31559 S2S TcpToken authentication bypass	6 May 202216:35	–	cvelist
NCSC	Vulnerabilities fixed in Splunk	6 May 202200:00	–	ncsc
NVD	CVE-2021-31559	6 May 202217:15	–	nvd
OSV	CVE-2021-31559	6 May 202217:15	–	osv
Prion	Cross site request forgery (csrf)	6 May 202217:15	–	prion
Positive Technologies	PT-2022-10035 · Splunk · Splunk Enterprise Indexer	6 May 202200:00	–	ptsecurity
RedhatCVE	CVE-2021-31559	9 Jan 202608:50	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "c2677382-988c-374f-8d60-116e626a43b0",
        "vendor": {
          "name": "Splunk"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "65e9d8a5-f23d-30fe-882f-12e5aec9dcf1",
        "product": {
          "name": "Splunk Enterprise"
        },
        "product_version": "8.2 version(s) before 8.2.1"
      },
      {
        "id": "e53de6ca-7cbf-3c79-979b-ed901858443f",
        "product": {
          "name": "Splunk Enterprise"
        },
        "product_version": "Version(s) before 8.1.5"
      }
    ]
  }
]

Source	Link
splunk	www.splunk.com/en_us/product-security/announcements/svd-2022-0503.html
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

CVSS 25

EPSS0.00815