CVE-2022-37437: splunk

csirt@kutim:~/threat-intel/cve/CVE-2022-37437

CVSS 9.8 · Critical EPSS 0,45%

Kerentanan Improper Certificate Validation pada splunk. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

When using Ingest Actions to configure a destination that resides on Amazon Simple Storage Service (S3) in Splunk Web, TLS certificate validation is not correctly performed and tested for the destination. The vulnerability only affects connections between Splunk Enterprise and an Ingest Actions Destination through Splunk Web and only applies to environments that have configured TLS certificate validation. It does not apply to Destinations configured directly in the outputs.conf configuration file. The vulnerability affects Splunk Enterprise version 9.0.0 and does not affect versions below 9.0.0, including the 8.1.x and 8.2.x versions.

Rincian

Terbit di NVD: 16 Agustus 2022
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-295: Improper Certificate Validation
EPSS (30 hari): 0,45% peluang dieksploitasi; lebih tinggi dari 36,9% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
splunk	splunk	Versi 9.0.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://www.splunk.com/en_us/product-security/announcements/svd-2022-0801.html mitigasi · advisory vendor

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.