~ / search / GHSA-f58w-649r-qjr9

GHSA-f58w-649r-qjr9

splunk-sdk does not properly verify untrusted TLS server certificates

Source: GitHub Advisory Database (reviewed) Critical CVE-2019-5729

Packages

EcosystemPackageAffectedFixed in
PyPI splunk-sdk < 1.6.6 1.6.6

Details

As written in the advisory (Markdown source, shown as plain text).

Splunk-SDK-Python before 1.6.6 does not properly verify untrusted TLS server certificates, which could result in man-in-the-middle attacks.

References

External links from the advisory. They lead to third-party sites.