CVE-2016-10931

NONE EPSS 50.1%
Published Aug 26, 20196y ago · Modified Jun 17, 20262w ago
Find Similar
Published Aug 26, 2019 6y ago
Last Modified Jun 17, 2026 2w ago

Description

An issue was discovered in the openssl crate before 0.9.0 for Rust. There is an SSL/TLS man-in-the-middle vulnerability because certificate verification is off by default and there is no API for hostname verification.

Threat Intelligence

EPSS Exploit Probability
50.1% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-295

Affected Products 1

VendorProductVersionRange
rust-openssl_projectrust-openssl* <0.9.0

References 1

  • rustsec.org https://rustsec.org/advisories/RUSTSEC-2016-0001.html
    Release NotesVendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.