CVE-2016-10931

An issue was discovered in the openssl crate before 0.9.0 for Rust. There is an SSL/TLS man-in-the-middle vulnerability because certificate verification is off by default and there is no API for hostname verification.
References
Link Resource
https://rustsec.org/advisories/RUSTSEC-2016-0001.html Release Notes Vendor Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:rust-openssl_project:rust-openssl:*:*:*:*:*:*:*:*

Information

Published : 2019-08-26 05:15

Updated : 2023-02-27 11:19


NVD link : CVE-2016-10931

Mitre link : CVE-2016-10931


JSON object : View

CWE
CWE-295

Improper Certificate Validation

Advertisement

dedicated server usa

Products Affected

rust-openssl_project

  • rust-openssl