CVE-2021-26253 — Improper Authentication in Splunk

CWE-287 — Improper Authentication3 documents3 sources
Severity
8.1HIGHNVD
EPSS
0.2%
top 57.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
SplunkSplunk Enterprise
Timeline
PublishedMay 6
Latest updateMay 7

Description

A potential vulnerability in Splunk Enterprise's implementation of DUO MFA allows for bypassing the MFA verification in Splunk Enterprise versions before 8.1.6. The potential vulnerability impacts Splunk Enterprise instances configured to use DUO MFA and does not impact or affect a DUO product or service.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 2.2 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5splunk/splunk_enterpriseVersion(s) before 8.1.6
▶NVDsplunk/splunk8.1.0 — 8.1.6

🔴Vulnerability Details

2
GHSA
GHSA-2393-5754-m287: A potential vulnerability in Splunk Enterprise's implementation of DUO MFA allows for bypassing the MFA verification in Splunk Enterprise versions bef↗2022-05-07
▶
CVEList
Bypass of Splunk Enterprise's implementation of DUO MFA↗2022-05-06
▶
CVE-2021-26253 — Improper Authentication in Splunk | cvebase