SSL/TLS Certificate Validation Vulnerability in VMware Products by SaltStack
CVE-2020-28972

5.9MEDIUM

Key Information:

Vendor: Saltstack
Status: Salt
Vendor: CVE Published:; 27 February 2021

What is CVE-2020-28972?

The SaltStack Salt platform prior to version 3002.5 contains a vulnerability where authentication to VMware vCenter, vSphere, and ESXi servers is flawed due to improper validation of SSL/TLS certificates in the vmware.py module. This weakness can allow attackers to potentially exploit untrusted connections, thereby seeking unauthorized access to sensitive services.