We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2023-22943

Modular Input REST API Requests Connect via HTTP after Certificate Validation Failure in Splunk Add-on Builder and Splunk CloudConnect SDK



AssignerSplunk
Reserved2023-01-10
Published2023-02-14
Updated2024-10-30

Description

In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connect over HTTPS occurs.



MEDIUM: 4.8CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Product status

4.1 before 4.1.2
affected

3.1 before 3.1.3
affected

Credits

Chris Green

References

https://advisory.splunk.com/advisories/SVD-2023-0213

cve.org CVE-2023-22943

nvd.nist.gov CVE-2023-22943

Download JSON

Share this page
https://cve.threatint.com
Subscribe to our newsletter to learn more about our work.