CVE-2016-10586

Name of the Vulnerable Software and Affected Versions macaca-chromedriver versions prior to 1.0.29

Description The issue concerns the insecure download of binary resources over HTTP, making it susceptible to man-in-the-middle (MITM) attacks. An attacker with a privileged network position could intercept the response and replace the executable with a malicious one, potentially leading to remote code execution (RCE) on the system running macaca-chromedriver.

Recommendations Update to version 1.0.29 or later.