Splunk

Add-on Builder

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2023-46231

  • EPSS 0.2%
  • Published 30.01.2024 17:15:10
  • Last modified 21.11.2024 08:28:07

In Splunk Add-on Builder versions below 4.1.4, the application writes user session tokens to its internal log files when you visit the Splunk Add-on Builder or when you build or edit a custom app or add-on.

4.9

CVE-2023-46230

  • EPSS 0.04%
  • Published 30.01.2024 17:15:09
  • Last modified 21.11.2024 08:28:07

In Splunk Add-on Builder versions below 4.1.4, the app writes sensitive information to internal log files.

5.3

CVE-2023-22943

  • EPSS 0.22%
  • Published 14.02.2023 18:15:12
  • Last modified 21.11.2024 07:45:41

In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connect over HTTP...