Universal Forwarder
Approved changes feed: RSS · Atom
cpe:2.3:a:splunk,_inc:universal_forwarder:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Splunk, Inc (710b39d6-e0a8-5c43-bdbd-683db1328ae2) |
|---|---|
| Product | Universal Forwarder (1b7afca3-f6e4-5551-a3ae-67335e8f0663) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-32155 |
vulnerable | 2026-06-08 05:44:42.615882 |
Universal Forwarder management services allows remote login by default
In universal forwarder versions before 9.0, management services are available remotely by default. When not required, it introduces a potential exposure, but it is not a vulnerability. If exposed, we recommend each customer assess the potential severity specific to your environment. In 9.0, the universal forwarder now binds the management port to localhost preventing remote logins by default. If management services are not required in versions before 9.0, set disableDefaultPort = true in server.conf OR allowRemoteLogin = never in server.conf OR mgmtHostPort = localhost in web.conf. See Configure universal forwarder management security (https://docs.splunk.com/Documentation/Splunk/9.0.0/Security/EnableTLSCertHostnameValidation#Configure_universal_forwarder_management_security) for more information on disabling the remote management services.
Published: 2022-06-15T16:49:26.618Z
Updated: 2024-09-16T20:12:22.106Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.