PT-2021-2235 · Vmware+4 · Vsphere+6
Published
2016-11-21
·
Updated
2024-08-08
·
CVE-2020-28972
CVSS v4.0
8.2
High
| Vector | AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
SaltStack Salt versions prior to 3002.5
Description
The issue is related to errors in the certificate authentication procedure on vCenter, vSphere, and ESXi servers. This can allow a remote attacker to perform a "man-in-the-middle" attack. The problem lies in the
vmware.py files, where authentication to VMware servers does not always validate the SSL/TLS certificate.Recommendations
For versions prior to 3002.5, update to version 3002.5 or later to resolve the issue. As a temporary workaround, consider disabling the
vmware.py files until a patch is available. Restrict access to the vulnerable vmware.py module to minimize the risk of exploitation. Avoid using the vulnerable authentication mechanism in the affected API endpoints until the issue is resolved.Fix
Improper Certificate Validation
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Esxi
Saltstack Salt
Suse
Ubuntu
Vcenter
Vsphere