CVE-2016-10932

Name of the Vulnerable Software and Affected Versions hyper crate versions prior to 0.9.4

Description An issue was discovered in the hyper crate for Rust on Windows, allowing an HTTPS man-in-the-middle attack because hostname verification was omitted. This enables an attacker to perform MitM attacks by preventing any valid CA-issued certificate, even if there's a hostname mismatch.

Recommendations For versions prior to 0.9.4, update to version 0.9.4 or later to address the issue by leveraging rust-openssl's built-in support for hostname verification.