CVE-2019-5729

Splunk-SDK-Python before 1.6.6 does not properly verify untrusted TLS server certificates, which could result in man-in-the-middle attacks.

Score

CVSS 3.0 8.1 High

Status

Modified - cve@mitre.org

Published

2019-03-21

Last modified

2024-08-04

Weaknesses

CWE-295

Affected products

• Software Development Kit (Splunk)

References

• https://www.splunk.com/view/SP-CAAAQAD