Information Disclosure of user names

In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.109, an attacker could determine whether or not another user exists on the instance by deciphering the error response that they would likely receive from the instance when they attempt to log in. This disclosure could then lead to additional brute-force password-guessing attacks. This vulnerability would require that the Splunk platform instance uses the Security Assertion Markup Language (SAML) authentication scheme.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

响应差异性信息暴露

部分Splunk产品 安全漏洞

Splunk是美国Splunk公司的一套数据收集分析软件。该软件主要用于收集、索引和分析及其所产生的数据，包括所有IT系统和基础结构（物理、虚拟机和云）生成的数据。 部分Splunk产品存在安全漏洞。攻击者利用该漏洞可以暴力破解密码。以下产品及版本受到影响：Splunk Enterprise 9.2.2之前版本、9.1.5之前版本、9.0.10之前版本、Splunk Cloud Platform 9.1.2312.109之前版本。

N/A

N/A