| Package | Affected versions | Patched versions |
|---|---|---|
| add-on builder | ≥ 4.1.0, < 4.1.2 | 4.1.2 |
| cloudconnect software development kit | ≥ 3.1.0, < 3.1.3 | 3.1.3 |
In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connect over HTTPS occurs.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free