CVE:CVE-2020-28972
CNNVD:CNNVD-202102-1698
Saltstack SaltStack Salt是SaltStack（Saltstack）公司的一套开源的用于管理基础架构的工具。该工具提供配置管理、远程执行等功能。
SaltStack Salt before 3002.5 存在安全漏洞，该漏洞源于VMware vcenter，vsphere和esxi servers 的身份验证并不总是验证SSL/TLS证书。
solution:Upgrade saltstack salt to a higher version than 2015.8.10,2015.8.13,2016.3.4,2016.3.6,2016.3.8,2016.11.3,2016.11.5,2016.11.10,2017.7.8,2018.3.5,2019.2.5,2019.2.8,3000.6,3001.4,3002.5,and avoid the version (,2015.8.10),[2015.8.11,2015.8.13),[2016.3.0,2016.3.4),[2016.3.5,2016.3.6),[2016.3.7,2016.3.8),[2016.3.9,2016.11.3),[2016.11.4,2016.11.5),[2016.11.7,2016.11.10),[2017.5.0,2017.7.8),[2018.2.0,2018.3.5],[2019.2.0,2019.2.5),[2019.2.6,2019.2.8),[3000,3000.6),[3001,3001.4),[3002,3002.5); Upgrade fedoraproject fedora to a higher version than 32,33,34,and avoid the version 32,33,34; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0