Lucene search
+L

9 matches found

Github Security Blog
Github Security Blog
•added 2021/08/25 8:42 p.m.•42 views

Improper Certificate Validation in security-framework

If custom root certificates were registered with a ClientBuilder, the hostname of the target server would not be validated against its presented leaf certificate. This issue was fixed by properly configuring the trust evaluation logic to perform that check...

5.3CVSS5.4AI score0.00654EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2019/08/26 6:15 p.m.•24 views

CVE-2017-18588

An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates...

5.3CVSS7.2AI score
SaveExploits0References1
NVD
NVD
•added 2019/08/26 6:15 p.m.•25 views

CVE-2017-18588

An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates...

5.3CVSS5.2AI score0.00654EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2019/08/26 6:15 p.m.•16 views

CVE-2017-18588

An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates...

5.3CVSS6.1AI score0.00654EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2019/08/26 5:18 p.m.•56 views

CVE-2017-18588

An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates...

5.3CVSS5.2AI score0.00654EPSS
SaveExploits0
Cvelist
Cvelist
•added 2019/08/26 5:18 p.m.•33 views

CVE-2017-18588

An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates...

5.2AI score0.00654EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/26 12:00 a.m.•3 views

CVE-2017-18588: Improper Certificate Validation

An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates...

5.3CVSS5.8AI score0.00654EPSS
SaveExploits0References2
OSV
OSV
•added 2017/03/15 12:00 p.m.•39 views

RUSTSEC-2017-0003 Hostname verification skipped when custom root certs used

If custom root certificates were registered with a ClientBuilder, the hostname of the target server would not be validated against its presented leaf certificate. This issue was fixed by properly configuring the trust evaluation logic to perform that check...

5.3CVSS5.2AI score0.00654EPSS
SaveExploits0References3
RustSec
RustSec
•added 2017/03/15 12:00 p.m.•35 views

Hostname verification skipped when custom root certs used

If custom root certificates were registered with a ClientBuilder, the hostname of the target server would not be validated against its presented leaf certificate. This issue was fixed by properly configuring the trust evaluation logic to perform that check...

5.3CVSS1.2AI score0.00654EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder