All Apps and Add-ons

Cloud Support - addon fails vetting

ChrisBell04
Communicator

When will the Cisco ACI addon support Cloud? It fails app vetting for the following reasons.

This is a preliminary report. More issues may be found upon further review. 
Thank you for your app install request. Your app did not meet security and functionality requirements for Splunk Cloud for the following reasons: 
Blocking issue:
1. The private key is displayed as plain text in this app which is not permitted in Splunk Cloud. Please remove this file. File: bin/websocket_client-0.35.0-py2.7.egg/websocket/privkey.pem.
2. The "cookie" containing privatekey was loged to local file, which is not permmited in spluk cloud. Please remove the privatekey in cookie. File: bin/acisession.py, line: 605.
3. The arguments field of input in setup page is vulnerable to xxs attack. Please validate or escape user input before saving. File: appserver/static/application.js.
Non-blocking issue:
1. Setup configures non-search-head features: inputs. File: default/setup.xml.
Once issues are remedied  you can submit your app to review.
0 Karma

woodcock
Esteemed Legend

You have to contact Cisco. The app says this:

SUPPORT
• This app is supported by Cisco Systems.
• Please ask questions by creating a TAC case on https://globalcontacts.cloudapps.cisco.com/contacts/contactDetails/en_US/c1o1-c2o2-c3o8 OR contact us at 1 800 553 2447 or 1 408 526 7209
• Alternatively, send us an email to aci-splunk-app@cisco.com
0 Karma

ChrisBell04
Communicator

Indeed. Blasting all channels of communication in attempt to get their attention.

0 Karma
Get Updates on the Splunk Community!

Improve Your Security Posture

Watch NowImprove Your Security PostureCustomers are at the center of everything we do at Splunk and security ...

Maximize the Value from Microsoft Defender with Splunk

 Watch NowJoin Splunk and Sens Consulting for this Security Edition Tech TalkWho should attend:  Security ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

Get the latest news and updates from the Splunk Community here! News From Splunk Answers ✍️ Splunk Answers is ...