title: Modular Input REST API Requests Connect via HTTP after Certificate Validation Failure in Splunk Add-on Builder and Splunk CloudConnect SDK
description: In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Modular Input incorrectly revert to using HTTP to connect after a failure to connect over HTTPS occurs.
problem types: When the product encounters an error condition or failure, its design requires it to fall back to a state that is less secure than other options that are available, such as selecting the weakest encryption algorithm or using the most permissive access control restrictions.
affected:
{
product: Splunk Add-on Builder
vendor: Splunk
versions:
version: 4.1, status: affected, versionType: custom, lessThan: 4.1.2
}
{
product: Splunk CloudConnect SDK
vendor: Splunk
versions:
version: 3.1, status: affected, versionType: custom, lessThan: 3.1.3
}
metrics:
cvssV3_1: [
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
version: 3.1
baseScore: 4.8
baseSeverity: MEDIUM
]
format: CVSS
scenarios: GENERAL