CVE-2020-12144CWE-295

The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated

Medium · published May 5, 2020

CVSS v3.1
6.0
EPSS
0%
Percentile
25.7
In the wild
Unconfirmed
What it is

The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated. This makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted portal.

The record
Technical detail
CVSS v3.1
6.0 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00335 · 25.7th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2020-05-05T19:54Z
EPSS history
Timeline
  • 05 MAY 19:54Z
    The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated
    cvelistv5