vulnerability

Gentoo Linux: CVE-2020-28972: Salt: Multiple vulnerabilities

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
4	(AV:N/AC:M/Au:N/C:P/I:N/A:N)	Feb 27, 2021	Apr 1, 2021	Mar 31, 2026

Severity

CVSS

(AV:N/AC:M/Au:N/C:P/I:N/A:N)

Published

Feb 27, 2021

Added

Apr 1, 2021

Modified

Mar 31, 2026

Description

In SaltStack Salt before 3002.5, authentication to VMware vcenter, vsphere, and esxi servers (in the vmware.py files) does not always validate the SSL/TLS certificate.

Solution

gentoo-linux-upgrade-app-admin-salt

References

CVE-2020-28972
https://attackerkb.com/topics/CVE-2020-28972
CWE-295
EUVD-EUVD-2021-0236
GENTOO-202103-01
GENTOO-202310-22
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-0236

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today