Vulnerabilities > CVE-2016-10932 - 7PK - Security Features vulnerability in Hyper

CVSS 5.8 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

NONE

network

hyper

CWE-254

NVD

Published: 2019-08-26

Updated: 2021-01-07

Summary

An issue was discovered in the hyper crate before 0.9.4 for Rust on Windows. There is an HTTPS man-in-the-middle vulnerability because hostname verification was omitted.

Vulnerable Configurations

Part	Description	Count
Application	Hyper Hyper Hyper - Hyper Hyper 0.1.0 Hyper Hyper 0.1.1 Hyper Hyper 0.1.2 Hyper Hyper 0.1.3 Hyper Hyper 0.1.4 Hyper Hyper 0.1.5 Hyper Hyper 0.1.6 Hyper Hyper 0.1.7 Hyper Hyper 0.1.8 Hyper Hyper 0.1.9 Hyper Hyper 0.1.10 Hyper Hyper 0.1.11 Hyper Hyper 0.1.12 Hyper Hyper 0.1.13 Hyper Hyper 0.2.0 Hyper Hyper 0.2.1 Hyper Hyper 0.3.0 Hyper Hyper 0.3.1 Hyper Hyper 0.3.2 Hyper Hyper 0.3.3 Hyper Hyper 0.3.4 Hyper Hyper 0.3.5 Hyper Hyper 0.3.6 Hyper Hyper 0.3.7 Hyper Hyper 0.3.8 Hyper Hyper 0.3.9 Hyper Hyper 0.3.10 Hyper Hyper 0.3.11 Hyper Hyper 0.3.12 Hyper Hyper 0.3.13 Hyper Hyper 0.3.14 Hyper Hyper 0.3.15 Hyper Hyper 0.3.16 Hyper Hyper 0.4.0 Hyper Hyper 0.5.0 Hyper Hyper 0.5.1 Hyper Hyper 0.5.2 Hyper Hyper 0.6.0 Hyper Hyper 0.6.1 Hyper Hyper 0.6.2 Hyper Hyper 0.6.3 Hyper Hyper 0.6.4 Hyper Hyper 0.6.5 Hyper Hyper 0.6.7 Hyper Hyper 0.6.8 Hyper Hyper 0.6.9 Hyper Hyper 0.6.10 Hyper Hyper 0.6.11 Hyper Hyper 0.6.12 Hyper Hyper 0.6.13 Hyper Hyper 0.6.14 Hyper Hyper 0.6.15 Hyper Hyper 0.6.16 Hyper Hyper 0.7.0 Hyper Hyper 0.7.1 Hyper Hyper 0.7.2 Hyper Hyper 0.8.0 Hyper Hyper 0.8.1 Hyper Hyper 0.9.0 Hyper Hyper 0.9.1 Hyper Hyper 0.9.2 Hyper Hyper 0.9.3	126
OS	Microsoft Microsoft Windows -	1

Common Weakness Enumeration (CWE)

CWE-254 - 7PK - Security Features

References

https://rustsec.org/advisories/RUSTSEC-2016-0002.html