splunk-sdk does not properly verify untrusted TLS server certificates

높음 8.1CVE-2019-5729 · GHSA-f58w-649r-qjr9 · PYSEC-2019-203 · Published 21/03/2019 · updated 17/06/2026

요약

CVE-2019-5729은(는) splunk-sdk, software development kit (splunk)에 영향을 주는 높음 (CVSS 8.1) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.70%, 전체 취약점의 53.3%보다 높음.
조치: 1.6.6 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
splunk-sdk PyPI	`< 1.6.6`	`1.6.6`
software development kit splunk	`< 1.6.6`	`1.6.6`

Splunk-SDK-Python before 1.6.6 does not properly verify untrusted TLS server certificates, which could result in man-in-the-middle attacks.

NVD description

Splunk-SDK-Python before 1.6.6 does not properly verify untrusted TLS server certificates, which could result in man-in-the-middle attacks.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.