EUVD-2022-53389

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Splunk Enterprise versions before 9.0 lacked TLS certificate validation for peer communications by default.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2022-32152	14 Jun 202211:55	–	attackerkb
Circl	CVE-2022-32152	15 Jun 202220:20	–	circl
CNNVD	Splunk 信任管理问题漏洞	15 Jun 202200:00	–	cnnvd
CVE	CVE-2022-32152	15 Jun 202216:46	–	cve
Cvelist	CVE-2022-32152 Splunk Enterprise lacked TLS cert validation for Splunk-to-Splunk communication by default	15 Jun 202216:46	–	cvelist
NCSC	Vulnerabilities fixed in Splunk products	16 Jun 202200:00	–	ncsc
NVD	CVE-2022-32152	15 Jun 202217:15	–	nvd
OSV	CVE-2022-32152	15 Jun 202217:15	–	osv
Prion	Design/Logic Flaw	15 Jun 202217:15	–	prion
Tenable Nessus	Splunk Enterprise < 9.0 Multiple Vulnerabilities	11 Aug 202200:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "a410c723-4ffd-3545-b772-397c8e9ea204",
        "vendor": {
          "name": "Splunk"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "891ace06-92b1-3c92-bff6-28dcc2489e82",
        "product": {
          "name": "Splunk Cloud Platform"
        },
        "product_version": "8.2 <8.2.2203"
      },
      {
        "id": "9d7c53d4-8bac-3bb3-bc19-c9b1b3bd1a64",
        "product": {
          "name": "Splunk Enterprise"
        },
        "product_version": "9.0 <9.0"
      }
    ]
  }
]

Source	Link
docs	www.docs.splunk.com/Documentation/Splunk/9.0.0/Security/EnableTLSCertHostnameValidation
docs	www.docs.splunk.com/Documentation/Splunk/9.0.0/Security/Updates
splunk	www.splunk.com/en_us/product-security/announcements/svd-2022-0602.html
research	www.research.splunk.com/application/splunk_digital_certificates_infrastructure_version/
research	www.research.splunk.com/application/splunk_digital_certificates_lack_of_encryption/
research	www.research.splunk.com/application/splunk_protocol_impersonation_weak_encryption_selfsigned/
research	www.research.splunk.com/network/splunk_identified_ssl_tls_certificates/

03 Oct 2025 20:07Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.2 - 8.1

CVSS 26.5

EPSS0.00473