CVE-2020-28972

Publication date

2021-02-27 00:00:00

Family

mitre

State

PUBLISHED

Description

In SaltStack Salt before 3002.5, authentication to VMware vcenter, vsphere, and esxi servers (in the vmware.py files) does not always validate the SSL/TLS certificate.