splunk splunk 证书验证不恰当

admin

0
文章

0
评论

2023-11-30 07:20:34 Ali_nvd 来源：ZONE.CI 全球网 0 阅读模式

splunk splunk 证书验证不恰当

CVE编号

CVE-2022-32151

利用情况

暂无

补丁情况

N/A

披露时间

2022-06-16

漏洞描述

The httplib and urllib Python libraries that Splunk shipped with Splunk Enterprise did not validate certificates using the certificate authority (CA) certificate stores by default in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203. Python 3 client libraries now verify server certificates by default and use the appropriate CA certificate stores for each library. Apps and add-ons that include their own HTTP libraries are not affected. For Splunk Enterprise, update to Splunk Enterprise version 9.0 and Configure TLS host name validation for Splunk-to-Splunk communications (https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/EnableTLSCertHostnameValidation) to enable the remediation.

解决建议

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/EnableTLSCertHost...
https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/Updates
https://research.splunk.com/application/splunk_protocol_impersonation_weak_en...
https://www.splunk.com/en_us/product-security/announcements/svd-2022-0601.html

受影响软件情况

1
#	类型	厂商	产品	版本	影响面
	运行在以下环境
	应用	splunk	splunk	*		Up to (excluding) 9.0
	运行在以下环境
	应用	splunk	splunk_cloud_platform	*		Up to (excluding) 8.2.2203