Vulnerability in Splunk
CVE-2022-32155
In universal forwarder versions before 9.0, management services are available remotely by default. When not required, it introduces a potential exposure, but it is not a vulnerability. If exposed, we recommend each customer assess the potential severity specific to your environment. In 9.0, the universal forwarder now binds the management port to localhost preventing remote logins by default. If management services are not required in versions before 9.0, set disableDefaultPort = true in server.conf OR allowRemoteLogin = never in server.conf OR mgmtHostPort = localhost in web.conf. See Configure universal forwarder management security (https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/EnableTLSCertHostnameValidation#Configure_universal_forwarder_management_security) for more information on disabling the remote management services.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.020 (79.7th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 80th percentile — 79.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.019 · newest: 0.020 · change: +0.001
Affected products
- Splunk
- Splunk Cloud Platform
- Splunk, Inc Universal Forwarder — versions 9.0
Weakness classification (CWE)
References
- docs.splunk.com/Documentation/Splunk/9.0.0/Security/Updates (Release Notes, Vendor Advisory)
- www.splunk.com/en_us/product-security/announcements/svd-2022-0605.html (Vendor Advisory)
- docs.splunk.com/Documentation/Splunk/9.0.0/Security/EnableTLSCertHostnameValida… (Mitigation, Vendor Advisory)
Frequently asked questions
- What is CVE-2022-32155?
- CVE-2022-32155 is a high-severity vulnerability in Splunk, classified under Incorrect Permission Assignment for Critical Resource. CVSS score: 7.5/10. Published 2022-06-15.
- How severe is CVE-2022-32155?
- High severity. CVSS v3 base score is 7.5 out of 10.