In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connect over HTTPS occurs.
5.3CVSS
5.2AI Score
0.001EPSS
In Splunk Add-on Builder versions below 4.1.4, the app writes sensitive information to internal log files.
8.2CVSS
4.9AI Score
0.0005EPSS
In Splunk Add-on Builder versions below 4.1.4, the application writes user session tokens to its internal log files when you visit the Splunk Add-on Builder or when you build or edit a custom app or add-on.
7.2CVSS
6.9AI Score
0.001EPSS