CVE-2017-18588
An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates.
- Score
- CVSS 3.0 5.3 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2019-08-26
- Last modified
- 2024-08-05
- Weaknesses
- CWE-295
Affected products
References
- https://rustsec.org/advisories/RUSTSEC-2017-0003.html
