CVE-2026-76403
Beschrijving NL
In Splunk Connect voor Kafka-versies onder 2.2.7 kan een niet-geverifieerde gebruiker die zich in het netwerkpad bevindt, alle relevante gegevens lezen of wijzigen die vanaf de connector worden verzonden wanneer Kerberos-verificatie wordt gebruikt met Hypertext Transfer Protocol (HTTP) Event Collector in Splunk Enterprise. Het beveiligingslek is mogelijk omdat het Kerberos-verificatiepad de geconfigureerde certificaatvalidatieopties niet toepast wanneer het de HTTP-client bouwt. Zie voor meer informatie Splunk Connect installeren voor Kafka (https://help.splunk.com/en/data-management/integrate-data-with-add-ons/splunk-connect-for-kafka/2 .2/install/install-splunk-connect-for-kafka), Beveiligingsconfiguraties voor Splunk Connect voor Kafka (https://help.splunk.com/en/splunk-enterprise/get-data-in/splunk-connect-for-kafka/2 .2/configure/security-configurations-for-splunk-connect-for-kafka) en HTTP-gebeurtenisverzamelaar instellen en gebruiken met configuratiebestanden (https:/ /help.splunk.com/en/splunk-enterprise/get-data-in/get-started-with-getting-data-in/9.4/get-data-with-http-event-collector/set-up-and-use-http-event-collector-with-configuration-files) in de Splunk documentatie.
Origineel (Engels) tonen
In Splunk Connect for Kafka versions below 2.2.7, an unauthenticated user positioned in the network path could read or alter all relevant data sent from the connector when Kerberos authentication is used with Hypertext Transfer Protocol (HTTP) Event Collector in Splunk Enterprise. The vulnerability is possible because the Kerberos authentication path does not apply the configured certificate validation options when it builds the HTTP client. For more information see Install Splunk Connect for Kafka (https://help.splunk.com/en/data-management/integrate-data-with-add-ons/splunk-connect-for-kafka/2.2/install/install-splunk-connect-for-kafka), Security configurations for Splunk Connect for Kafka (https://help.splunk.com/en/splunk-enterprise/get-data-in/splunk-connect-for-kafka/2.2/configure/security-configurations-for-splunk-connect-for-kafka), and Set up and use HTTP Event Collector with configuration files (https://help.splunk.com/en/splunk-enterprise/get-data-in/get-started-with-getting-data-in/9.4/get-data-with-http-event-collector/set-up-and-use-http-event-collector-with-configuration-files) in the Splunk documentation.