ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2020-35662

—
CVSS 3.1
7.4 high
EPSS
3%p86
Published
()
Modified
Description

In SaltStack Salt before 3002.5, when authenticating to services using certain modules, the SSL certificate is not always validated.

Vendors
saltstackfedoraprojectdebian
Products
salt, fedora, debian linux
Weakness
CWE-295
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
NVD CVE.org GitHub PoCs EPSS (3.0%)

In the news

No ingested article mentions this CVE yet.