In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connect over HTTPS occurs.
References
| Link | Resource |
|---|---|
| https://advisory.splunk.com/advisories/SVD-2023-0213 | Mitigation Vendor Advisory |
| https://advisory.splunk.com/advisories/SVD-2023-0213 | Mitigation Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 07:45
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://advisory.splunk.com/advisories/SVD-2023-0213 - Mitigation, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.8 |
25 Oct 2023, 18:17
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connect over HTTPS occurs. |
Information
Published : 2023-02-14 18:15
Updated : 2024-11-21 07:45
NVD link : CVE-2023-22943
Mitre link : CVE-2023-22943
CVE.ORG link : CVE-2023-22943
JSON object : View
Products Affected
splunk
- add-on_builder
- cloudconnect_software_development_kit