VYPR
← All advisories
High severity7.5NVD Advisory· Published May 6, 2022· Updated Jun 17, 2026

CVE-2021-31559

CVE-2021-31559

Description

A crafted request bypasses S2S TCP Token authentication writing arbitrary events to an index in Splunk Enterprise Indexer 8.1 versions before 8.1.5 and 8.2 versions before 8.2.1. The vulnerability impacts Indexers configured to use TCPTokens. It does not impact Universal Forwarders.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Splunk/Splunk2 versions
    cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*+ 1 more
    • cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*range: >=8.1.0,<8.1.5
    • cpe:2.3:a:splunk:splunk:8.2.0:*:*:*:enterprise:*:*:*
  • Splunk/Enterprise Indexerllm-create
    Range: <8.1.5, <8.2.1
  • Splunk/Splunk Enterprisecpe-rescue
    Range: 8.2 version(s) before 8.2.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.