CWE-295: Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.
A kind of CWE-287 Improper Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- rubrik cdmA man-in-the-middle vulnerability related to vCenter access was found in Rubrik CDM 3.x and 4.x...8.1 High
- f5 big-ip advanced firewall manager, big-ip afm +1 moreX509 certificate verification was not correctly implemented in the early access "user id" feature...4.8 Medium
- banconeon neonThe Neon app 1.6.14 iOS does not verify X.509 certificates from SSL servers, which allows remote...5.9 Medium
- yodobashiThe Yodobashi App for Android 1.2.1.0 and earlier does not verify X.509 certificates from SSL...5.9 Medium
- microsoft .net core, .net framework, powershell core +1 more +3 moreImproper Certificate Validation in Microsoft .NET Framework components7.5 High
- matrixsslMatrixSSL version 3.7.2 has an incorrect UTCTime date range validation in its X.509 certificate...5.9 Medium
- ldaptive, ldaptive vt-ldap +1 moreImproper Certificate Validation in vt-ldap5.9 Medium
- puppet enterprisePuppet Enterprise 3.7.x and 3.8.0 might allow remote authenticated users to manage certificates...6.8 Medium
- net-ldap project net-ldapnet-ldap Improper Certificate Validation vulnerability5.9 Medium
- gitlabGitLab 9.4.x before 9.4.2 does not support LDAP SSL certificate verification, but a...5.9 Medium
- pandora, pandora media, inc. ios app +1 morePandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by...8.1 High
- axs flash seats, flash seats mobile app +1 moreFlash Seats Mobile App for Android version 1.7.9 and earlier and for iOS version 1.9.51 and...7.5 High
- redhat openstack platformWhen libvirtd is configured by OSP director (tripleo-heat-templates) to use the TLS transport it...8.1 High
- huawei smc2.0, smc2.0 firmware +1 moreHuawei SMC2.0 with software of V100R003C10, V100R005C00SPC100, V100R005C00SPC101B001T,...5.3 Medium
- norton install norton securityPrior to v 7.6, the Install Norton Security (INS) product can be susceptible to a certificate...3.7 Low
- mit krb5, kerberos 5, redhat enterprise linux +3 more +5 moreAn authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1...6.5 Medium
- nv-websocket-client project nv-websocket-clientnv-websocket-client allows attackers to spoof SSL/TLS servers via an arbitrary valid certificate5.9 Medium
- cyberduckCyberduck before 4.4.4 on Windows does not properly validate X.509 certificate chains, which...5.9 Medium
- microsoft .net core, aspnetcore +1 moreImproper Certificate Validation7.5 High
- savitech-ic savitech driverSavitech driver packages for Windows silently install a self-signed certificate into the Trusted...7.4 High
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable vulnerability exists in the filtering functionality of Circle with Disney. SSL...8.1 High
- apple tvos, watchos, iphone os +1 more +3 moreAn issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13...7.5 High
- f5 networks, inc. big-ip pem, f5 big-ip policy enforcement manager +1 moreIn F5 BIG-IP PEM 12.1.0 through 12.1.2 when downloading the Type Allocation Code (TAC) database...7.4 High
- redhat libvirt, debian linux +1 morelibvirt version 2.3.0 and later is vulnerable to a bad default configuration of "verify-peer=no"...8.1 High
- ms-ins sumaho, sumaho driving capability diagnosis +1 moreThe SumaHo application 3.0.0 and earlier for Android and the SumaHo "driving capability"...5.9 Medium
- redhat enterprise mrgovirt-engine, as used in Red Hat MRG 3, allows man-in-the-middle attackers to spoof servers by...5.9 Medium
- akeo rufusAkeo Consulting Rufus prior to version 2.17.1187 does not adequately validate the integrity of...5.3 Medium
- juniper junos, juniper networks junos os +1 moreSRX Series: Antivirus updates are downloaded without verification7.4 High
- cisco pvc2300 firmware, rtp300 firmware, rv120w firmware +21 more +23 moreMultiple Cisco embedded devices use hardcoded X.509 certificates and SSH host keys embedded in...5.9 Medium
- gurunavi gournaviGurunavi App for iOS before 6.0.0 does not verify SSL certificates which could allow remote...5.9 Medium
- dwango niconiconiconico App for iOS before 6.38 does not verify SSL certificates which could allow remote...7.4 High
- rakutencard rakuten cardRakuten card App for iOS 5.2.0 through 5.2.4 does not verify SSL certificates which might allow...7.4 High
- golang goOn Darwin, user's trust preferences for root certificates were not honored. If the user had a...7.5 High
- zohocorp site24x7 mobile network pollerThe Zoho Site24x7 Mobile Network Poller application before 1.1.5 for Android does not verify X...5.9 Medium
- cisco ios, ios xe +1 moreA vulnerability in the Cisco Network Plug and Play application of Cisco IOS 12.4 through 15.6 and...5.9 Medium
- okb smart passbookSmartphone Passbook 1.0.0 does not verify X.509 certificates from SSL servers, which allows man...5.9 Medium
- comicsmart ganma\!GANMA! App for iOS does not verify SSL certificates.5.9 Medium
- ana all nippon airwaysANA App for Android 3.1.1 and earlier, and ANA App for iOS 3.3.6 and earlier does not verify SSL...5.9 Medium
- pulpproject pulppulp-consumer-client 2.4.0 through 2.6.3 does not check the server's TLS certificate signatures...8.1 High
- schneider electric se citect anywhere, powerscada anywhere +1 moreA vulnerability exists in Schneider Electric's PowerSCADA Anywhere v1.0 redistributed with...6.5 Medium
- dovecot, fedoraproject fedora +1 moreThe ssl-proxy-openssl.c function in Dovecot before 2.2.17, when SSLv3 is disabled, allow remote...5.9 Medium
- twitterThe Twitter iOS client versions 6.62 and 6.62.1 fail to validate Twitter's server certificates...5.9 Medium
- puppet puppetlabs-apacheVersions of the puppetlabs-apache module prior to 1.11.1 and 2.1.0 make it very easy to...7.5 High
- dlink dir-850l firmwareThe D-Link NPAPI extension, as used on D-Link DIR-850L REV. A (with firmware through...5.9 Medium
- dlink dir-850l firmwareThe D-Link NPAPI extension, as used on D-Link DIR-850L REV. A (with firmware through...5.9 Medium
- honda moto lincHonda Moto LINC 1.6.1 does not verify SSL certificates.5.9 Medium
- heimdal project heimdal, opensuse leap +1 moreThe transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath...7.5 High
- saltstack saltSalt vulnerable to Improper Certificate Validation7.5 High
- elastic x-pack security, x-pack +1 moreAn error was found in the X-Pack Security TLS trust manager for versions 5.0.0 to 5.5.1. If...5.5 Medium
- igniterealtime openfireOpenFire XMPP Server before 3.10 accepts self-signed certificates, which allows remote attackers...7.5 High
- Show moreLoading…