CVE-2022-37437 - CVE House
Back to Database
Status published High CVE-2022-37437

Ingest Actions UI in Splunk Enterprise 9.0.0 disabled TLS certificate validation

Vulnerability Description

When using Ingest Actions to configure a destination that resides on Amazon Simple Storage Service (S3) in Splunk Web, TLS certificate validation is not correctly performed and tested for the destination. The vulnerability only affects connections between Splunk Enterprise and an Ingest Actions Destination through Splunk Web and only applies to environments that have configured TLS certificate validation. It does not apply to Destinations configured directly in the outputs.conf configuration file. The vulnerability affects Splunk Enterprise version 9.0.0 and does not affect versions below 9.0.0, including the 8.1.x and 8.2.x versions.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-37437

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Eric LaMothe at Splunk
  • Ali Mirheidari at Splunk

References

More from Splunk

View All →
CVE-2025-22621
Privilege escalation for users who hold the “splunk_app_soar“ role in the Splunk App for SOAR
Medium 6.4
CVE-2025-20389
Improper Input Validation in "label" column field in Splunk Secure Gateway App
Medium 4.3
CVE-2025-20388
Blind Server Side Request Forgery (SSRF) through Distributed Search Peers in Splunk Enterprise
Low 2.7
CVE-2025-20387
Incorrect permissions assignment on Splunk Universal Forwarder for Windows during new installation or upgrade
High 8
CVE-2025-20386
Incorrect permission assignment on Splunk Enterprise for Windows during new installation or upgrade
High 8

Affected Vendor

Affected Software

Splunk Enterprise
Vulnerable Versions:
9.0.0

Timeline

Official Publish: August 16th, 2022
Last Modified: September 16th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Weaknesses (CWE)

CWE-295

MITRE ATT&CK TTPs

T1557 Adversary-in-the-Middle
Credential Access
T1040 Network Sniffing
Collection
T1552 Unsecured Credentials
Credential Access
T1071 Application Layer Protocol
Command and Control
T1565 Data Manipulation
Impact