Vulnerability CVE-2021-31559


Published: 2022-05-06

Description:
A crafted request bypasses S2S TCP Token authentication writing arbitrary events to an index in Splunk Enterprise Indexer 8.1 versions before 8.1.5 and 8.2 versions before 8.2.1. The vulnerability impacts Indexers configured to use TCPTokens. It does not impact Universal Forwarders.

 References:
https://www.splunk.com/en_us/product-security/announcements/svd-2022-0503.html

Copyright 2026, cxsecurity.com

 

Back to Top