Vulnerability CVE-2021-33845

Vulnerability CVE-2021-33845

Published: 2022-05-06

Description:

The Splunk Enterprise REST API allows enumeration of usernames via the lockout error message. The potential vulnerability impacts Splunk Enterprise instances before 8.1.7 when configured to repress verbose login errors.

References:

https://research.splunk.com/application/splunk_user_enumeration_attempt/

https://www.splunk.com/en_us/product-security/announcements/svd-2022-0502.html

Copyright 2026, cxsecurity.com