Code injection

2022-05-0617:15:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.5%

JSON

The Splunk Enterprise REST API allows enumeration of usernames via the lockout error message. The potential vulnerability impacts Splunk Enterprise instances before 8.1.7 when configured to repress verbose login errors.

CPENameOperatorVersion
splunkge8.1.0
splunklt8.1.7

CPE	Name	Operator	Version
	splunk	ge	8.1.0
	splunk	lt	8.1.7

References

research.splunk.com/application/splunk_user_enumeration_attempt/

www.splunk.com/en_us/product-security/announcements/svd-2022-0502.html