CVE-2019-5729: Vulnerability in splunk-sdk - Man-in-the-Middle Attack
Summary
CVE-2019-5729: splunk-sdk does not properly verify untrusted TLS server certificates. Affects splunk-sdk versions < 1.6.6. Fixed in 1.6.6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
splunk-sdk is a Python package that provides a software development kit (SDK) for interacting with Splunk, a popular platform for searching, analyzing, and visualizing machine-generated data. The SDK allows developers to programmatically access and manipulate Splunk data. However, versions of splunk-sdk prior to 1.6.6 are vulnerable to a moderate severity issue that could enable man-in-the-middle attacks.
Vulnerability Detail
The vulnerability in splunk-sdk arises from its improper verification of untrusted TLS server certificates. This oversight opens the door for potential man-in-the-middle attacks, where an attacker can intercept and modify communications between the SDK and the Splunk server. By exploiting this vulnerability, an attacker could potentially gain unauthorized access to sensitive data, manipulate search results, or perform other malicious actions.
How To Fix
Latest published version: 3.0.1 as of 23 Oct 2026
pip install --upgrade "splunk-sdk==3.0.1"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
1.6.6
This is the first release that contains the fix.
pip install --upgrade "splunk-sdk==1.6.6"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. However, developers can consider implementing additional security measures such as certificate pinning or using a trusted proxy to mitigate the risk of man-in-the-middle attacks.
Conclusion
The vulnerability in splunk-sdk exposes applications to potential man-in-the-middle attacks due to improper verification of TLS server certificates. It is crucial to upgrade to splunk-sdk version 1.6.6 or later to address this vulnerability. Developers should also consider implementing additional security measures to further protect their applications. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for splunk-sdk →
FAQ
splunk-sdk is a Python package that provides an SDK for interacting with Splunk, a platform for analyzing machine-generated data.
A man-in-the-middle attack is a type of cyber attack where an attacker intercepts and modifies communications between two parties without their knowledge.
This vulnerability could allow an attacker to gain unauthorized access to sensitive data, manipulate search results, or perform other malicious actions within the context of the affected application.
To fix this vulnerability, upgrade splunk-sdk to version 1.6.6 or later.
While no specific workaround is provided, implementing additional security measures such as certificate pinning or using a trusted proxy can help mitigate the risk of man-in-the-middle attacks.
