Vulnerability Description
A potential vulnerability in Splunk Enterprise's implementation of DUO MFA allows for bypassing the MFA verification in Splunk Enterprise versions before 8.1.6. The potential vulnerability impacts Splunk Enterprise instances configured to use DUO MFA and does not impact or affect a DUO product or service.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Splunk | Splunk | >= 8.1.0, < 8.1.6 |
Related Weaknesses (CWE)
References
- https://www.splunk.com/en_us/product-security/announcements/svd-2022-0504.htmlVendor Advisory
- https://www.splunk.com/en_us/product-security/announcements/svd-2022-0504.htmlVendor Advisory
FAQ
What is CVE-2021-26253?
CVE-2021-26253 is a vulnerability with a CVSS score of 8.1 (HIGH). A potential vulnerability in Splunk Enterprise's implementation of DUO MFA allows for bypassing the MFA verification in Splunk Enterprise versions before 8.1.6. The potential vulnerability impacts Spl...
How severe is CVE-2021-26253?
CVE-2021-26253 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-26253?
Check the references section above for vendor advisories and patch information. Affected products include: Splunk Splunk.