Lucene search

SplunkCVE-2022-37437

HistoryAug 16, 2022 - 9:15 p.m.

CVE-2022-37437

2022-08-1621:15:13

CWE-295

Splunk

web.nvd.nist.gov

cve-2022-37437

ingest actions

splunk

tls certificate validation

amazon s3

nvd

security vulnerability

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.001

Percentile

49.2%

JSON

When using Ingest Actions to configure a destination that resides on Amazon Simple Storage Service (S3) in Splunk Web, TLS certificate validation is not correctly performed and tested for the destination. The vulnerability only affects connections between Splunk Enterprise and an Ingest Actions Destination through Splunk Web and only applies to environments that have configured TLS certificate validation. It does not apply to Destinations configured directly in the outputs.conf configuration file. The vulnerability affects Splunk Enterprise version 9.0.0 and does not affect versions below 9.0.0, including the 8.1.x and 8.2.x versions.

Affected configurations

Nvd

Node

splunksplunkMatch9.0.0enterprise

VendorProductVersionCPE
splunksplunk9.0.0cpe:2.3:a:splunk:splunk:9.0.0:*:*:*:enterprise:*:*:*

Vendor	Product	Version	CPE
splunk	splunk	9.0.0	cpe:2.3:a:splunk:splunk:9.0.0::::enterprise:::

CNA Affected

[
  {
    "product": "Splunk Enterprise",
    "vendor": "Splunk",
    "versions": [
      {
        "status": "affected",
        "version": "9.0.0"
      }
    ]
  }
]

References

www.splunk.com/en_us/product-security/announcements/svd-2022-0801.html

Social References

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.001

Percentile

49.2%

JSON

Related for CVE-2022-37437