Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Splunk Cloud Platform 8.2.2203 Clear all filters
TI-2022-13885 CVE-2022-32153 · GHSA-3vq3-mvhh-hjcp

Splunk Enterprise lacked TLS host name validation

Priority LOW 37

Splunk Enterprise peers in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203 did not validate the TLS certificates during Splunk-to-Splunk communications by default.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00932 Published 2022-06-15 Fixed in 9.0, 8.2.2203 CWE-297
TI-2022-13883 CVE-2022-32151 · GHSA-4mv8-3862-hghv

Splunk Enterprise disabled TLS validation using the CA certificate stores in Python 3 libraries by default

Priority MEDIUM 41

The httplib and urllib Python libraries that Splunk shipped with Splunk Enterprise did not validate certificates using the certificate authority (CA) certificate stores by default in Splunk Enterprise versions before 9.0…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00813 Published 2022-06-15 Fixed in 9.0, 8.2.2203 CWE-295