CVE-2022-32151

CVE-2022-32151 is a critical vulnerability affecting Splunk Enterprise versions prior to 9.0 and Splunk Cloud Platform versions prior to 8.2.2203. It stems from the httplib and urllib Python libraries failing to validate server certificates by default, leading to a lack of proper TLS certificate hostname validation. This allows for potential man-in-the-middle attacks, enabling an unauthenticated attacker to intercept and compromise sensitive data with high confidentiality and integrity impact. While rated 9.1 Critical, there is currently no evidence of active exploitation, public exploit code, or significant community discussion.