CVE-2022-20860 Cisco Nexus Dashboard SSL Certificate Validation Vulnerability

A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard could allow an unauthenticated, remote attacker to alter communications with associated controllers or view sensitive information. This vulnerability exists because SSL server certificates are not validated when Cisco Nexus...

CVE-2022-20860

CVE-2022-20860 affects Cisco Nexus Dashboard SSL/TLS certificate validation. The issue arises when Nexus Dashboard connects to APIC/Cloud APIC/ND Fabric Controller, where server certificates are not validated, enabling a man-in-the-middle to impersonate controllers and potentially alter communica...