CVE-2024-36996 in Splunk Enterprise and Cloud Platform allows attackers to determine user existence via login error responses, potentially leading to brute-force attacks. The vulnerability affects instances using SAML authentication. This information disclosure can assist malicious actors in crafting targeted attacks.

While CVE-2024-36996 has a CVSS score of 5.3, indicating medium severity, its SOCRadar Vulnerability Risk Score (SVRS) is 52. This suggests a moderate level of real-world risk based on threat actor activity and exploit availability. Organizations using affected Splunk versions with SAML authentication should prioritize patching to prevent potential information disclosure and subsequent attacks. The CWE-204 classification highlights the sensitivity of exposed information, making it vital to mitigate this vulnerability promptly.