Skip to content
OpenAdvisories
Medium · 4.8 CVE-2023-22943 EUVD-2023-27045GHSA-jjqg-fqrm-g2vj

Modular Input REST API Requests Connect via HTTP after Certificate Validation Failure in Splunk Add-on Builder and Splunk CloudConnect SDK

Published Feb 14, 2023 · Updated Feb 28, 2025 · Assigned by Splunk

Vendor: Splunk Product: Splunk Add-on Builder Product: Splunk CloudConnect SDK

Description

In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connect over HTTPS occurs.

Affected products

VendorProductAffectedFixed
Splunk Splunk Add-on Builder 4.1 – < 4.1.2 4.1.2
Splunk Splunk CloudConnect SDK 3.1 – < 3.1.3 3.1.3

Advisories 1

References