topic Re: Splunk Add-On builder Security Vulnerability in All Apps and Add-ons

Splunk Add-On builder Security Vulnerability

mcsnorkey — Wed, 02 Mar 2022 06:05:55 GMT

Hi,

I've found a bug in the Splunk Add-on Builder and I've tried to report it but I'm not having much luck.

From my Splunk account I try to open a ticket and get this message: "It appears you do not have an active Support Contract or entitlement, and as a result, cannot open a Support case"

From the add-on builder page I try to file a case but that just goes to: "URL No Longer Exists
You have attempted to reach a URL that no longer exists on salesforce.com."

I tried calling Splunk but they put me through to sales then dropped my call.

I was hoping someone might point me in the right direction to help Splunk fix this issue.

Thanks.

Re: Splunk Add-On builder Security Vulnerability

richgalloway — Wed, 02 Mar 2022 13:56:36 GMT

Try https://ideas.splunk.com

Re: Splunk Add-On builder Security Vulnerability

mcsnorkey — Wed, 02 Mar 2022 21:50:26 GMT

Hi Rich,

Thanks for the idea - I have a similar problem though in that I don't want to explicitly detail the flaw in a public forum for everyone to read about - I'd rather have a way of notifying Splunk directly but that seems very hard to do. I might see if any of my colleagues have a direct line with Splunk.

Thanks again.

Re: Splunk Add-On builder Security Vulnerability

youngsuh — Wed, 02 Mar 2022 21:57:10 GMT

what version of add-on builder that give you the issue? I have the latest version. I get no such error.

Re: Splunk Add-On builder Security Vulnerability

tchavez_splunk — Wed, 02 Mar 2022 22:06:11 GMT

Howdy! Sorry for the trouble you're seeing trying to report the bug.

I've reached out to a few folks internally who may jump in but feel free to reach me directly at tchavez@splunk.com

Best,

Tom

Re: Splunk Add-On builder Security Vulnerability

mcsnorkey — Wed, 02 Mar 2022 22:18:47 GMT

Hi tchavez,

I've sent you an email detailing the issue.

Hopefully it gets fixed 🙂

Thanks for reaching out.

Cheers.

Re: Splunk Add-On builder Security Vulnerability

mcsnorkey — Wed, 02 Mar 2022 22:21:31 GMT

Hi youngsuh,

I have emailed Splunk and I'll let them disclose any further information on the issue if they want.

The issue exists for me in both 4.0.0 and 4.1.0.

cheers.