Skip to content
OpenAdvisories

Archive

27 February 2021

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 5.9

    SaltStack Salt Improper Certificate Validation

    In SaltStack Salt before 3002.5, authentication to VMware vcenter, vsphere, and esxi servers (in the vmware.py files) does not always validate the SSL/TLS certificate.

  • Medium 4.4

    SaltStack Salt Cleartext Storage of Sensitive Information via cmdmod

    An issue was discovered in through SaltStack Salt before 3002.5. salt.modules.cmdmod can log credentials to the info or error log level.