Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
CVE coverage

CVE-2021-33845

CVSS 5.3 1 detection found
View on NVD →
The Splunk Enterprise REST API allows enumeration of usernames via the lockout error message. The potential vulnerability impacts Splunk Enterprise instances before 8.1.7 when configured to repress verbose login errors.

Detection rules

Source Rule Status Updated
splunk Splunk User Enumeration Attempt production 2026-05-14