CVE-2022-32152

CVE-2022-32152 describes a vulnerability in Splunk Enterprise and Splunk Cloud Platform where Splunk-to-Splunk communications did not validate TLS certificates by default, potentially allowing an attacker with administrator credentials to introduce a peer without a valid certificate. This high-severity vulnerability (CVSS 7.2) has a network attack vector and low attack complexity, enabling an attacker to achieve high confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.