CVE-2020-35662

In SaltStack Salt before 3002.5, when authenticating to services using certain modules, the SSL certificate is not always validated

High · published February 27, 2021

CVSS v3.1
7.4
EPSS
3%
Percentile
87.1
In the wild
Unconfirmed
What it is

In SaltStack Salt before 3002.5, when authenticating to services using certain modules, the SSL certificate is not always validated.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.02965 · 87.1th percentile
Published
2021-02-27T00:00Z
EPSS history
Timeline
  • 27 FEB 00:00Z
    In SaltStack Salt before 3002.5, when authenticating to services using certain modules, the SSL certificate is not always validated
    cvelistv5