CVE-2022-32151

🗓️ 15 Jun 2022 17:15:08Reported by [email protected]Type

Splunk Enterprise and Splunk Cloud Platform prior to 9.0 and 8.2.2203 respectively, did not verify certificates in httplib and urllib Python libraries, but Python 3 client libraries now validate server certificates by default and use appropriate CA certificate stores

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2022-32151	14 Jun 202211:55	–	attackerkb
CNNVD	Splunk 信任管理问题漏洞	15 Jun 202200:00	–	cnnvd
CVE	CVE-2022-32151	15 Jun 202216:46	–	cve
Cvelist	CVE-2022-32151 Splunk Enterprise disabled TLS validation using the CA certificate stores in Python 3 libraries by default	15 Jun 202216:46	–	cvelist
EUVD	EUVD-2022-53388	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Splunk products	16 Jun 202200:00	–	ncsc
OSV	CVE-2022-32151	15 Jun 202217:15	–	osv
Prion	Hardcoded credentials	15 Jun 202217:15	–	prion
Tenable Nessus	Splunk Enterprise < 9.0 Multiple Vulnerabilities	11 Aug 202200:00	–	nessus

NVD

Node

splunk splunkRange<9.0enterprise

splunk splunk_cloud_platformRange<8.2.2203

Source	Link
docs	www.docs.splunk.com/Documentation/Splunk/9.0.0/Security/EnableTLSCertHostnameValidation
research	www.research.splunk.com/application/splunk_protocol_impersonation_weak_encryption_simplerequest/
docs	www.docs.splunk.com/Documentation/Splunk/9.0.0/Security/Updates
splunk	www.splunk.com/en_us/product-security/announcements/svd-2022-0601.html

21 Nov 2024 07:05Current

CVSS 26.4

CVSS 3.17.4 - 9.1

EPSS0.00202

CWE-295