UpHeron
All vulnerabilities

Servers and applications

CVE-2022-37437

When using Ingest Actions to configure a destination that resides on Amazon Simple Storage Service (S3) in Splunk Web, TLS certificate validation is not correctly performed and tested for the destination. The vulnerability only affects connections between Splunk Enterprise and an Ingest Actions Destination through Splunk Web and only applies to environments that have configured TLS certificate…

Severity
Critical 9.8
Published
16 Aug 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Splunk EnterpriseServers and applications · cpe:a:splunk:splunk
  • Version 9.0.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-37437
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-37437