9.8

CVE-2022-37437: splunk Improper Certificate Validation

CVSS: 9.8v3.1CriticalModified
Published 16-08-2022Last modified 16-09-2024
Open JSON

Vulnerability summary

CVE-2022-37437 is a critical (CVSS 9.8) Improper Certificate Validation vulnerability in splunk. EPSS estimates a 0.45% chance of exploitation in the next 30 days, higher than 37.3% of scored vulnerabilities.

Overall risk
70/100
0100
High · default modelHow is this calculated?
CVSS score
9.8/10
010
Critical · v3.1 (NVD)
EPSS score
0.45%
0%100%
Low · +0.01 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 16-08-2022
    PublishedVulnerability first disclosed.
  2. 16-09-2024
    Last modifiedVulnerability information updated.

Description

When using Ingest Actions to configure a destination that resides on Amazon Simple Storage Service (S3) in Splunk Web, TLS certificate validation is not correctly performed and tested for the destination. The vulnerability only affects connections between Splunk Enterprise and an Ingest Actions Destination through Splunk Web and only applies to environments that have configured TLS certificate validation. It does not apply to Destinations configured directly in the outputs.conf configuration file. The vulnerability affects Splunk Enterprise version 9.0.0 and does not affect versions below 9.0.0, including the 8.1.x and 8.2.x versions.

CVSS metrics

2 scores · 2 sources · 1 version

EPSS trend

Probability

0.45%

Chance of exploitation in the next 30 days

Percentile

37%

Versus all other CVEs

30-day change

+0.01 pp

From 0.44% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.45%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Splunk2 products

1 vendor · 2 products

References

1 links