CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.9. It affects VMware, VMWare, ESXi and other products.
CVE
CVE-2020-28972
Severity
MEDIUM
CVSS
5.9
EPSS
3.09%
VMware VMWare ESXi vCenter
Original NVD Description
In SaltStack Salt before 3002.5, authentication to VMware vcenter, vsphere, and esxi servers (in the vmware.py files) does not always validate the SSL/TLS certificate.
Related CVEs
Other vulnerabilities affecting the same vendor(s)