CWE-295: Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.
A kind of CWE-287 Improper Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- myfpcu financial plus mobile bankingThe financial-plus-mobile-banking/id731070564 app 3.0.3 for iOS does not verify X.509...5.9 Medium
- meafinancial avb bank mobile bankingThe avb-bank-mobile-banking/id592565443 app 3.0.0 for iOS does not verify X.509 certificates from...5.9 Medium
- meafinancial fsb dequeen mobile bankingThe fsb-dequeen-mobile-banking/id1091025340 app 3.0.1 for iOS does not verify X.509 certificates...5.9 Medium
- meafinancial first security bank sleepy eye mobileThe first-security-bank-sleepy-eye-mobile/id870531890 app 3.0.0 for iOS does not verify X.509...5.9 Medium
- meafinancial community banks cb2goThe community-banks-cb2go/id445828071 app 3.1.3 for iOS does not verify X.509 certificates from...5.9 Medium
- meafinancial fccbThe First Citizens Community Bank fccb/id809930960 app 3.0.1 for iOS does not verify X.509...5.9 Medium
- meafinancial freedom 1st credit union mobile bankingThe Freedom First freedom-1st-credit-union-mobile-banking/id1085229458 app 3.0.0 for iOS does not...5.9 Medium
- lbtc lee bank \& trustThe Lee Bank & Trust lbtc-mobile/id1068984753 app 3.0.1 for iOS does not verify X.509...5.9 Medium
- cayugalakenationalbank cayuga lake national bankThe cayuga-lake-national-bank/id1151601539 app 4.0.1 for iOS does not verify X.509 certificates...5.9 Medium
- meafinancial vision bankThe MEA Financial vision-bank/id420406345 app 3.0.1 for iOS does not verify X.509 certificates...5.9 Medium
- wawacu wawa employees credit union mobileThe wawa-employees-credit-union-mobile/id1158082793 app 4.0.1 for iOS does not verify X.509...5.9 Medium
- dell bsafe cert-cEMC RSA BSAFE Cert-C before 2.9.0.5 contains a potential improper certificate processing...7.5 High
- cybozu kintone, cybozu, inc. kintone mobile for android +1 moreThe Cybozu kintone mobile for Android 1.0.6 and earlier does not verify X.509 certificates from...5.9 Medium
- nihon unisys, ltd. mobigate app for android, mobigate app for ios, unisys mobigate +2 moreThe mobiGate App for Android version 2.2.1.2 and earlier and mobiGate App for iOS version 2.2.4.1...5.9 Medium
- acer portalAcer Portal app before 3.9.4.2000 for Android does not properly validate SSL certificates, which...5.3 Medium
- lenovo service bridgeIn Lenovo Service Bridge before version 4, a bug found in the signature verification logic of the...7.5 High
- apache hiveorg.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service vulnerable to Improper Certificate Validation7.5 High
- wolfsslA specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL...8.1 High
- apple mac os xAn issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue...5.9 Medium
- apple iphone osAn issue was discovered in certain Apple products. iOS before 10.3.2 is affected. The issue...7.5 High
- puma pumatracThe PUMA PUMATRAC app 3.0.2 for iOS does not verify X.509 certificates from SSL servers, which...5.9 Medium
- yottamark inc. shopwell - healthy diet \& grocery food scannerThe YottaMark ShopWell - Healthy Diet & Grocery Food Scanner app 5.3.7 through 5.4.2 for iOS does...5.9 Medium
- interval international internationalThe Interval International app 3.3 through 3.5.1 for iOS does not verify X.509 certificates from...5.9 Medium
- zipongo inc. healthy recipes and grocery dealsThe Zipongo - Healthy Recipes and Grocery Deals app before 6.3 for iOS does not verify X.509...5.9 Medium
- warnerbros ellentubeThe Warner Bros. ellentube app 3.1.1 through 3.1.3 for iOS does not verify X.509 certificates...5.9 Medium
- radiojavan radio javanThe Radio Javan app 9.3.4 through 9.6.1 for iOS does not verify X.509 certificates from SSL...5.9 Medium
- life before us yo.The Life Before Us Yo app 2.5.8 for iOS does not verify X.509 certificates from SSL servers,...5.9 Medium
- changyou dolphin web browserThe MoboTap Dolphin Web Browser - Fast Private Internet Search app 9.23.0 through 9.23.2 for iOS...5.9 Medium
- gocivix indiana votersThe Quest Information Systems Indiana Voters app 1.1.24 for iOS does not verify X.509...5.9 Medium
- microsoft .net frameworkModerate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core7.5 High
- watchguard panda mobile securityAcceptance of invalid/self-signed TLS certificates in "Panda Mobile Security" 1.1 for iOS allows...5.9 Medium
- foxitsoftware foxit pdfAcceptance of invalid/self-signed TLS certificates in "Foxit PDF - PDF reader, editor, form,...8.1 High
- atlassian hipchatAcceptance of invalid/self-signed TLS certificates in Atlassian HipChat before 3.16.2 for iOS...5.9 Medium
- 21st century insurance century insuranceThe 21st Century Insurance app 10.0.0 for iOS does not verify X.509 certificates from SSL servers...5.9 Medium
- banco de costa rica bcr movilThe Banco de Costa Rica BCR Movil app 3.7 for iOS does not verify X.509 certificates from SSL...5.9 Medium
- america\'s first federal credit union first fcu mobile bankingThe America's First Federal Credit Union (FCU) Mobile Banking app 3.1.0 for iOS does not verify X...5.9 Medium
- emirates nbd bank p.j.s.c nbd, nbd ksa +1 moreThe Emirates NBD Bank P.J.S.C Emirates NBD KSA app 3.10.0 through 3.10.4 (UAE) and 2.0.1 through...5.9 Medium
- dotit-corp banque zitounaThe DOT IT Banque Zitouna app 2.1 for iOS does not verify X.509 certificates from SSL servers,...5.9 Medium
- forex tradeking forexThe TradeKing Forex for iPhone app 1.2.1 for iOS does not verify X.509 certificates from SSL...5.9 Medium
- forex forextraderThe FOREX.com FOREXTrader for iPhone app 2.9.12 through 2.9.14 for iOS does not verify X.509...5.9 Medium
- banco santander mexico sa supermovilThe Banco Santander Mexico SA Supermovil app 3.5 through 3.7 for iOS does not verify X.509...5.9 Medium
- electronic funds source llc efs mobile driver sourceThe Electronic Funds Source (EFS) Mobile Driver Source app 2.5 for iOS does not verify X.509...5.9 Medium
- great southern bank southern mobile bankingThe Great Southern Bank Great Southern Mobile Banking app before 4.0.4 for iOS does not verify X...5.9 Medium
- everyday health inc diabetes in check\The Everyday Health Diabetes in Check: Blood Glucose & Carb Tracker app 3.4.2 for iOS does not...5.9 Medium
- dollar bank mobileThe Dollar Bank Mobile app 2.6.3 for iOS does not verify X.509 certificates from SSL servers,...5.9 Medium
- payquicker mypayquickerThe PayQuicker app 1.0.0 for iOS does not verify X.509 certificates from SSL servers, which...5.9 Medium
- state bank of india bank anywhereThe State Bank of India State Bank Anywhere app 5.1.0 for iOS does not verify X.509 certificates...5.9 Medium
- think mutual bank mobile banking appThe Think Mutual Bank Mobile Banking app 3.1.5 for iOS does not verify X.509 certificates from...5.9 Medium
- sccu space coast credit unionThe Space Coast Credit Union Mobile app 2.2 for iOS and 2.1.0.1104 for Android does not verify X...5.9 Medium
- apache qpid protonThe C client and C-based client bindings in the Apache Qpid Proton library before 0.13.1 on...5.9 Medium
- Show moreLoading…