CVE-2021-31559

A crafted request bypasses S2S TCP Token authentication writing arbitrary events to an index in Splunk Enterprise Indexer 8.1 versions before 8.1.5 and 8.2 versions before 8.2.1. The vulnerability impacts Indexers configured to use TCPTokens. It does not impact Universal Forwarders...

Cross site request forgery (csrf)

A crafted request bypasses S2S TCP Token authentication writing arbitrary events to an index in Splunk Enterprise Indexer 8.1 versions before 8.1.5 and 8.2 versions before 8.2.1. The vulnerability impacts Indexers configured to use TCPTokens. It does not impact Universal Forwarders...

CVE-2021-31559

Splunk Enterprise Indexer authentication bypass (CVE-2021-31559) affects 8.1.x before 8.1.5 and 8.2.x before 8.2.1 for Indexers using TCPTokens; a crafted request bypasses S2S TCP Token authentication and can write arbitrary events to an index, while Universal Forwarders are unaffected. Connected...