CVE-2022-32152

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-32152
Splunk Enterprise peers in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203 did not validate the TLS certificates during Splunk-to-Splunk communications by default. Splunk peer communications configured properly with valid certificates were not vulnerable. However, an attacker with administrator credentials could add a peer without a valid certificate and connections from misconfigured nodes without valid certificates did not fail by default. For Splunk Enterprise, update to Splunk Enterprise version 9.0 and Configure TLS host name validation for Splunk-to-Splunk communications (https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/EnableTLSCertHostnameValidation) to enable the remediation.

8.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.5 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 8.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/EnableTLSCertHostnameValidation Mitigation Vendor Advisory
https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/Updates Release Notes Vendor Advisory
https://research.splunk.com/application/splunk_digital_certificates_infrastructure_version/ Mitigation Vendor Advisory
https://research.splunk.com/application/splunk_digital_certificates_lack_of_encryption/ Mitigation Vendor Advisory
https://research.splunk.com/application/splunk_protocol_impersonation_weak_encryption_selfsigned/ Mitigation Vendor Advisory
https://research.splunk.com/network/splunk_identified_ssl_tls_certificates/ Mitigation Vendor Advisory
https://www.splunk.com/en_us/product-security/announcements/svd-2022-0602.html Vendor Advisory
https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/EnableTLSCertHostnameValidation Mitigation Vendor Advisory
https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/Updates Release Notes Vendor Advisory
https://research.splunk.com/application/splunk_digital_certificates_infrastructure_version/ Mitigation Vendor Advisory
https://research.splunk.com/application/splunk_digital_certificates_lack_of_encryption/ Mitigation Vendor Advisory
https://research.splunk.com/application/splunk_protocol_impersonation_weak_encryption_selfsigned/ Mitigation Vendor Advisory
https://research.splunk.com/network/splunk_identified_ssl_tls_certificates/ Mitigation Vendor Advisory
https://www.splunk.com/en_us/product-security/announcements/svd-2022-0602.html Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:splunk:splunk:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:splunk:splunk_cloud_platform:*:*:*:*:*:*:*:*
History

21 Nov 2024, 07:05

Type Values Removed Values Added
CVSS v2 : 6.5
v3 : 7.2 		v2 : 6.5
v3 : 8.1
References () https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/EnableTLSCertHostnameValidation - Mitigation, Vendor Advisory () https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/EnableTLSCertHostnameValidation - Mitigation, Vendor Advisory
References () https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/Updates - Release Notes, Vendor Advisory () https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/Updates - Release Notes, Vendor Advisory
References () https://research.splunk.com/application/splunk_digital_certificates_infrastructure_version/ - Mitigation, Vendor Advisory () https://research.splunk.com/application/splunk_digital_certificates_infrastructure_version/ - Mitigation, Vendor Advisory
References () https://research.splunk.com/application/splunk_digital_certificates_lack_of_encryption/ - Mitigation, Vendor Advisory () https://research.splunk.com/application/splunk_digital_certificates_lack_of_encryption/ - Mitigation, Vendor Advisory
References () https://research.splunk.com/application/splunk_protocol_impersonation_weak_encryption_selfsigned/ - Mitigation, Vendor Advisory () https://research.splunk.com/application/splunk_protocol_impersonation_weak_encryption_selfsigned/ - Mitigation, Vendor Advisory
References () https://research.splunk.com/network/splunk_identified_ssl_tls_certificates/ - Mitigation, Vendor Advisory () https://research.splunk.com/network/splunk_identified_ssl_tls_certificates/ - Mitigation, Vendor Advisory
References () https://www.splunk.com/en_us/product-security/announcements/svd-2022-0602.html - Vendor Advisory () https://www.splunk.com/en_us/product-security/announcements/svd-2022-0602.html - Vendor Advisory
Information

Published : 2022-06-15 17:15

Updated : 2024-11-21 07:05

NVD link : CVE-2022-32152

Mitre link : CVE-2022-32152

CVE.ORG link : CVE-2022-32152

JSON object : View

Products Affected

splunk

  • splunk_cloud_platform
  • splunk
CWE
CWE-295

Improper Certificate Validation


NetmanageIT Website NetmanageIT OSINT Web NetmanageIT OpenCTI NetmanageIT PDF Tools NetmanageIT CTO Corner Blog NetmanageIT Email Header Analyzer NetmanageIT Password Pusher NetmanageIT Internet Health and Latency Dashboard NetmanageIT Dedicated Speed Test Site NetmanageIT Ubuntu Mirror 10Gbps Copyright OpenCVE 2024