CVE-2023-22943
14.02.2023, 18:15
In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connect over HTTPS occurs.
| Vendor | Product | Version |
|---|---|---|
| splunk | add-on_builder | 4.1.0 ≤ 𝑥 < 4.1.2 |
| splunk | cloudconnect_software_development_kit | 3.1.0 ≤ 𝑥 < 3.1.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-636 - Not Failing Securely ('Failing Open')When the product encounters an error condition or failure, its design requires it to fall back to a state that is less secure than other options that are available, such as selecting the weakest encryption algorithm or using the most permissive access control restrictions.
- CWE-295 - Improper Certificate ValidationThe software does not validate, or incorrectly validates, a certificate.