An issue was discovered in the openssl crate before 0.9.0 for Rust. There is an SSL/TLS man-in-the-middle vulnerability because certificate verification is off by default and there is no API for hostname verification.
References
Link | Resource |
---|---|
https://rustsec.org/advisories/RUSTSEC-2016-0001.html | Release Notes Vendor Advisory |
Configurations
Information
Published : 2019-08-26 05:15
Updated : 2023-02-27 11:19
NVD link : CVE-2016-10931
Mitre link : CVE-2016-10931
JSON object : View
CWE
CWE-295
Improper Certificate Validation
Products Affected
rust-openssl_project
- rust-openssl