Splunk Vulnerabilities

Splunk Enterprise

Hi,

I could see that few of Splunk search head servers are affected with these 2 below vulnerabilities.

Can someone kindly let me know what is the remediation steps has to be taken to fix the 2 below vulnerabilities?

1. Host is Vulnerable to Extended Master Secret TLS Extension (TLS triple handshake)

2. CIPHER KEY-EXCHANGE AUTHENTICATION MAC ENCRYPTION(KEY-STRENGTH) GRADE
TLSv1.1 SUPPORTS CIPHERS WITH NO AUTHENTICATION

Get Updates on the Splunk Community!

Watch Now! In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...