splunk-sdk does not properly verify untrusted TLS server certificates

ALTO 8.1CVE-2019-5729 · GHSA-f58w-649r-qjr9 · PYSEC-2019-203 · Published 21/03/2019 · updated 17/06/2026

En resumen

CVE-2019-5729 es una vulnerabilidad ALTO (CVSS 8.1) que afecta a splunk-sdk, software development kit (splunk).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.70%, mayor que el 53.3% de las vulnerabilidades.
Solución: actualizar a 1.6.6 o posterior.

Package	Affected versions	Patched versions
splunk-sdk PyPI	`< 1.6.6`	`1.6.6`
software development kit splunk	`< 1.6.6`	`1.6.6`

Splunk-SDK-Python before 1.6.6 does not properly verify untrusted TLS server certificates, which could result in man-in-the-middle attacks.

NVD description

Splunk-SDK-Python before 1.6.6 does not properly verify untrusted TLS server certificates, which could result in man-in-the-middle attacks.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.