What is GHSA-f58w-649r-qjr9?

GHSA-f58w-649r-qjr9 is a security advisory published by GitHub Security Advisories with Critical severity. splunk-sdk does not properly verify untrusted TLS server certificates

Which CVE IDs does GHSA-f58w-649r-qjr9 cover?

GHSA-f58w-649r-qjr9 covers the following CVE IDs: CVE-2019-5729. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-f58w-649r-qjr9?

GHSA-f58w-649r-qjr9 has a CVSS v3 base score of 8.1, published by GitHub Security Advisories.

Which products are affected by GHSA-f58w-649r-qjr9?

GHSA-f58w-649r-qjr9 affects 1 product, including: pip/splunk-sdk:\u003c 1.6.6.

GHSA-f58w-649r-qjr9CriticalCVSS 8.1

splunk-sdk does not properly verify untrusted TLS server certificates

Vendor

GitHub Security Advisories

Published

March 25, 2019

Last Modified

October 27, 2024

🔗 CVE IDs covered (1)

CVE-2019-5729 →

📋 Description

Splunk-SDK-Python before 1.6.6 does not properly verify untrusted TLS server certificates, which could result in man-in-the-middle attacks.

🎯 Affected products1

pip/splunk-sdk:< 1.6.6

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2019-5729
https://github.com/advisories/GHSA-f58w-649r-qjr9
https://www.splunk.com/view/SP-CAAAQAD
https://github.com/pypa/advisory-database/tree/main/vulns/splunk-sdk/PYSEC-2019-203.yaml