cvedb.io
CVE-2023-22943
MEDIUM · CVSS 4.8
EPSS exploitation probability: 0%
Published 2023-02-14T18:15:12.993 · Last modified 2026-06-17T05:36:28.610

Summary

In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connect over HTTPS occurs.

Affected products

splunk — add-on_builder

Does this affect you?

Add your gear to cvedb and we'll alert you only when splunk ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.