MongoDB Rust Driver TLS Insecure Validation Vulnerability

A vulnerability exists in the MongoDB Rust Driver in versions prior to 3.2.5, where disabling certificate validation can be achieved by setting tlsInsecure=False in the connection string. This flaw allows for insecure TLS connections by bypassing proper certificate verification.

Impact

Exploiting this vulnerability leads to insecure TLS connections, allowing potential man-in-the-middle attacks by disabling certificate validation.

Remediation

Users can upgrade to MongoDB Rust Driver version 3.2.5 or later to address this vulnerability.