NetSight
medium5.3

CVE-2017-18588

An issue was discovered in the security-framework crate before 0.1.12 for Rust.

Impact

An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates.

Affected products

VendorProductAffected versions
Security-Framework ProjectSecurity-Framework
before 0.1.12

Weakness classification

References