CVE-2022-32152

Katalog CVE

CVSS 7.2 · High EPSS 0,94%

Kerentanan Improper Certificate Validation pada splunk, splunk cloud platform. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

Splunk Enterprise peers in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203 did not validate the TLS certificates during Splunk-to-Splunk communications by default. Splunk peer communications configured properly with valid certificates were not vulnerable. However, an attacker with administrator credentials could add a peer without a valid certificate and connections from misconfigured nodes without valid certificates did not fail by default. For Splunk Enterprise, update to Splunk Enterprise version 9.0 and Configure TLS host name validation for Splunk-to-Splunk communications (https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/EnableTLSCertHostnameValidation) to enable the remediation.

Rincian

Terbit di NVD

15 Juni 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-295: Improper Certificate Validation

EPSS (30 hari)

0,94% peluang dieksploitasi; lebih tinggi dari 59,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/EnableTLSCertHostnameValidation mitigasi · advisory vendor
• https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/Updates release notes · advisory vendor
• https://research.splunk.com/application/splunk_digital_certificates_infrastructure_version/ mitigasi · advisory vendor
• https://research.splunk.com/application/splunk_digital_certificates_lack_of_encryption/ mitigasi · advisory vendor
• https://research.splunk.com/application/splunk_protocol_impersonation_weak_encryption_selfsigned/ mitigasi · advisory vendor
• https://research.splunk.com/network/splunk_identified_ssl_tls_certificates/ mitigasi · advisory vendor
• https://www.splunk.com/en_us/product-security/announcements/svd-2022-0602.html advisory vendor