← All advisories

High severity8.1OSV Advisory· Published Mar 21, 2019· Updated Jun 17, 2026

CVE-2019-5729

CVE-2019-5729

Description

Splunk-SDK-Python before 1.6.6 does not properly verify untrusted TLS server certificates, which could result in man-in-the-middle attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
splunk-sdkPyPI	< 1.6.6	1.6.6

Affected products

3

Splunk/Splunk SDK PythonOSV
Range: 0.1.0, 0.1.0a, 0.8.0, …
Splunk/Software Development Kit
cpe:2.3:a:splunk:software_development_kit:*:*:*:*:*:python:*:*
Range: <1.6.6
ghsa-coords
pkg:pypi/splunk-sdk
Range: < 1.6.6

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-f58w-649r-qjr9ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-5729ghsaADVISORY
www.splunk.com/view/SP-CAAAQADnvdVendor AdvisoryWEB
github.com/pypa/advisory-database/tree/main/vulns/splunk-sdk/PYSEC-2019-203.yamlghsaWEB

News mentions

0

No linked articles in our index yet.