5.3
CVSSv3

CVE-2017-18588

Published: 26/08/2019 Updated: 30/08/2019
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 446
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

An issue exists in the security-framework crate prior to 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

security-framework project security-framework