CVE-2022-32151

Katalog CVE

CVSS 9.1 · Critical EPSS 0,78%

Kerentanan Improper Certificate Validation pada splunk, splunk cloud platform. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

The httplib and urllib Python libraries that Splunk shipped with Splunk Enterprise did not validate certificates using the certificate authority (CA) certificate stores by default in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203. Python 3 client libraries now verify server certificates by default and use the appropriate CA certificate stores for each library. Apps and add-ons that include their own HTTP libraries are not affected. For Splunk Enterprise, update to Splunk Enterprise version 9.0 and Configure TLS host name validation for Splunk-to-Splunk communications (https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/EnableTLSCertHostnameValidation) to enable the remediation.

Rincian

Terbit di NVD

15 Juni 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-295: Improper Certificate Validation

EPSS (30 hari)

0,78% peluang dieksploitasi; lebih tinggi dari 54,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/EnableTLSCertHostnameValidation advisory vendor
• https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/Updates release notes · advisory vendor
• https://research.splunk.com/application/splunk_protocol_impersonation_weak_encryption_simplerequest/ mitigasi · advisory vendor
• https://www.splunk.com/en_us/product-security/announcements/svd-2022-0601.html advisory vendor