Splunk · Splunk Enterprise · CVE-2021-26253
**Name of the Vulnerable Software and Affected Versions**
Splunk Enterprise versions prior to 8.1.6
**Description**
A potential issue in Splunk Enterprise's implementation of DUO MFA allows for bypassing the MFA verification. This issue impacts Splunk Enterprise instances configured to use DUO MFA and does not affect any DUO product or service.
**Recommendations**
For versions prior to 8.1.6, update to version 8.1.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the MFA verification process until a patch is applied.