{"id":"CVE-2023-22943","aliases":["EUVD-2023-27045","GHSA-jjqg-fqrm-g2vj"],"status":"published","title":"Modular Input REST API Requests Connect via HTTP after Certificate Validation Failure in Splunk Add-on Builder and Splunk CloudConnect SDK","description":"In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connect over HTTPS occurs.","severity":{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00315,"percentile":0.24618,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-295","CWE-636"],"published":"2023-02-14T17:22:40Z","modified":"2026-06-17T05:36:28Z","products":[{"vendor":"splunk","product":"add-on_builder"},{"vendor":"splunk","product":"cloudconnect_software_development_kit"},{"vendor":"splunk","product":"splunk add-on builder"},{"vendor":"splunk","product":"splunk cloudconnect sdk"}],"references":[{"url":"https://advisory.splunk.com/advisories/SVD-2023-0213","tags":["x_transferred","Mitigation","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22943"},{"url":"https://github.com/advisories/GHSA-jjqg-fqrm-g2vj"}],"sources":{"cve":[{"id":"CVE-2023-22943","title":"Modular Input REST API Requests Connect via HTTP after Certificate Validation Failure in Splunk Add-on Builder and Splunk CloudConnect SDK","description":"In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connect over HTTPS occurs.","status":"published","published":"2023-02-14T17:22:40.69Z","modified":"2025-02-28T11:03:49.432Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-636"],"updated_at":"2026-11-02T14:35:16.126506Z"}],"euvd":[{"id":"EUVD-2023-27045","description":"In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connect over HTTPS occurs.","status":"published","published":"2023-02-14T17:22:40Z","modified":"2025-02-28T11:03:49Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T20:53:19.898689Z"}],"ghsa":[{"id":"GHSA-jjqg-fqrm-g2vj","title":"In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions...","description":"In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connect over HTTPS occurs. The vulnerability affects AoB and apps that AoB generates when using the REST API Modular Input functionality through its user interface. The vulnerability also potentially affects third-party apps and add-ons that call the *cloudconnectlib.splunktacollectorlib.cloud_connect_mod_input* Python class directly.","status":"published","published":"2023-02-14T18:30:20Z","modified":"2026-03-14T05:04:05Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-295","CWE-636"],"updated_at":"2026-11-02T15:06:36.943588Z"}],"nvd":[{"id":"CVE-2023-22943","description":"In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connect over HTTPS occurs.","status":"published","published":"2023-02-14T18:15:12.993Z","modified":"2026-06-17T05:36:28.61Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-636","CWE-295"],"updated_at":"2026-11-02T14:07:46.811196Z"}]}}