CVE-2023-22943

Description

In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connect over HTTPS occurs.

Reserved 2023-01-10 | Published 2023-02-14 | Updated 2024-12-10 | Assigner Splunk

Problem types

When the product encounters an error condition or failure, its design requires it to fall back to a state that is less secure than other options that are available, such as selecting the weakest encryption algorithm or using the most permissive access control restrictions.

Product status

4.1 before 4.1.2
affected

3.1 before 3.1.3
affected

Credits

Chris Green

References

advisory.splunk.com/advisories/SVD-2023-0213

cve.org (CVE-2023-22943)

nvd.nist.gov (CVE-2023-22943)

Download JSON