Vulnerabilities > CVE-2016-10932 - 7PK - Security Features vulnerability in Hyper

CVSS 4.8 - MEDIUM

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

high complexity

hyper

CWE-254

NVD

Published: 2019-08-26

Updated: 2021-01-07

Summary

An issue was discovered in the hyper crate before 0.9.4 for Rust on Windows. There is an HTTPS man-in-the-middle vulnerability because hostname verification was omitted.

Vulnerable Configurations

Part	Description	Count
Application	Hyper Hyper Hyper - Hyper Hyper 0.1.0 Hyper Hyper 0.1.1 Hyper Hyper 0.1.2 Hyper Hyper 0.1.3 Hyper Hyper 0.1.4 Hyper Hyper 0.1.5 Hyper Hyper 0.1.6 Hyper Hyper 0.1.7 Hyper Hyper 0.1.8 Hyper Hyper 0.1.9 Hyper Hyper 0.1.10 Hyper Hyper 0.1.11 Hyper Hyper 0.1.12 Hyper Hyper 0.1.13 Hyper Hyper 0.2.0 Hyper Hyper 0.2.1 Hyper Hyper 0.3.0 Hyper Hyper 0.3.1 Hyper Hyper 0.3.2 Hyper Hyper 0.3.3 Hyper Hyper 0.3.4 Hyper Hyper 0.3.5 Hyper Hyper 0.3.6 Hyper Hyper 0.3.7 Hyper Hyper 0.3.8 Hyper Hyper 0.3.9 Hyper Hyper 0.3.10 Hyper Hyper 0.3.11 Hyper Hyper 0.3.12 Hyper Hyper 0.3.13 Hyper Hyper 0.3.14 Hyper Hyper 0.3.15 Hyper Hyper 0.3.16 Hyper Hyper 0.4.0 Hyper Hyper 0.5.0 Hyper Hyper 0.5.1 Hyper Hyper 0.5.2 Hyper Hyper 0.6.0 Hyper Hyper 0.6.1 Hyper Hyper 0.6.2 Hyper Hyper 0.6.3 Hyper Hyper 0.6.4 Hyper Hyper 0.6.5 Hyper Hyper 0.6.7 Hyper Hyper 0.6.8 Hyper Hyper 0.6.9 Hyper Hyper 0.6.10 Hyper Hyper 0.6.11 Hyper Hyper 0.6.12 Hyper Hyper 0.6.13 Hyper Hyper 0.6.14 Hyper Hyper 0.6.15 Hyper Hyper 0.6.16 Hyper Hyper 0.7.0 Hyper Hyper 0.7.1 Hyper Hyper 0.7.2 Hyper Hyper 0.8.0 Hyper Hyper 0.8.1 Hyper Hyper 0.9.0 Hyper Hyper 0.9.1 Hyper Hyper 0.9.2 Hyper Hyper 0.9.3	127
OS	Microsoft Microsoft Windows -	1

Common Weakness Enumeration (CWE)

CWE-254 - 7PK - Security Features

References

https://rustsec.org/advisories/RUSTSEC-2016-0002.html