SSL Certificate Validation Flaw in SaltStack Salt Affects Multiple Versions
CVE-2020-35662

7.4HIGH

Key Information:

Vendor: Saltstack
Status: Salt
Vendor: CVE Published:; 27 February 2021

What is CVE-2020-35662?

In SaltStack Salt versions before 3002.5, a vulnerability exists where the SSL certificate is not consistently validated when authenticating to services via certain modules. This oversight can allow unauthorized access, posing significant security risks to the integrity and confidentiality of data transmitted within affected systems. Administrators are strongly advised to apply the latest updates to mitigate potential threats associated with this vulnerability.