CVE-2020-35662

High

In SaltStack Salt before 3002.5, when authenticating to services using certain modules, the SSL certificate is not always validated.

mitre·CWE-295·Published 2021-02-27

CVSS

7.4

EPSS

0.03

KEV

Exploits

Vendor statements (6)

cve.orgen

132 chars

In SaltStack Salt before 3002.5, when authenticating to services using certain modules, the SSL certificate is not always validated.

OSV.deven

132 chars

In SaltStack Salt before 3002.5, when authenticating to services using certain modules, the SSL certificate is not always validated.

GHSAen

132 chars

In SaltStack Salt before 3002.5, when authenticating to services using certain modules, the SSL certificate is not always validated.

NVDes

155 chars

En SaltStack Salt versiones anteriores a 3002.5, cuando se autentican en servicios usando determinados módulos, el certificado SSL no siempre es comprobado

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N
3.1	Primary	cve.org	7.4	—	—	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
3.1	Primary	cve.org	7.4	—	—	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
3.1	Primary	NVD	7.4	2.2	5.2	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
3.1	Secondary	GHSA	7.4	—	—	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
3.1	Secondary	NVD	7.4	2.2	5.2	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N