CVE-2015-4017

CVE-2015-4017 describes a critical vulnerability in SaltStack Salt versions prior to 2014.7.6, where the aliyun, proxmox, and splunk modules fail to verify SSL certificates during connection. This oversight allows for man-in-the-middle attacks, enabling an attacker to intercept or tamper with communications. With a CVSS v3 score of 7.5 (HIGH), this vulnerability is easily exploitable over the network with low attack complexity, potentially leading to high integrity impacts. Despite its severity, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.