CVE-2019-5729

Splunk-SDK-Python prior to 1.6.6 does not properly verify untrusted TLS server certificates, enabling potential Man-in-the-Middle attacks. Affected component: Splunk SDK for Python; vulnerable versions include up to 1.6.5. Root cause: improper TLS certificate verification on client-side. Impact: ...