CWE-295: Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.
A kind of CWE-287 Improper Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- heimdal project heimdal, debian linux, fedoraproject fedora +2 more +4 moreIn the client side of Heimdal before 7.6.0, failure to verify anonymous PKINIT PA-PKINIT-KX key...7.4 High
- citrix netscaler sd-wan, sd-wan +1 moreCitrix SD-WAN 10.2.x before 10.2.1 and NetScaler SD-WAN 10.0.x before 10.0.7 have Improper...5.9 Medium
- printerlogic management software, print management +1 morePrinterLogic Print Management Software fails to validate the management portal SSL certificates7.4 High
- cisco small business 200 series smart switches, sf200-24 firmware, sf200-24fp firmware +112 more +114 moreCisco Small Business Switches Secure Shell Certificate Authentication Bypass Vulnerability7.2 High
- cisco nx-os software for nexus 9000 series fabric switches aci mode, nx-os +1 moreCisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Insecure Fabric Authentication Vulnerability8.1 High
- jenkins sitemonitor, jenkins project sitemonitor plugin +1 moreJenkins SiteMonitor Plugin globally and unconditionally disables SSL/TLS certificate validation5.9 Medium
- jenkins koji, jenkins project koji plugin +1 moreJenkins Koji Plugin globally and unconditionally disables SSL/TLS certificate validation5.9 Medium
- apache qpid, apache software foundation qpid proton, redhat enterprise linux desktop +8 more +10 moreWithdrawn Advisory: Improper Certificate Validation in Apache Qpid Proton7.4 High
- squareup okhttpCertificatePinner.java in OkHttp 3.x through 3.12.0 allows man-in-the-middle attackers to bypass...5.9 Medium
- python urllib3, canonical ubuntu linux +1 moreImproper Certificate Validation in urllib37.5 High
- matrixsslpubRsaDecryptSignedElementExt in MatrixSSL 4.0.1 Open, as used in Inside Secure TLS Toolkit, has...9.8 Critical
- apple tvos, watchos, iphone os +2 moreA certificate validation issue existed in configuration profiles. This was addressed with...7.5 High
- cisco ios and ios xe software, ios, ios xe +2 moreCisco IOS and IOS XE Software Smart Call Home Certificate Validation Vulnerability5.9 Medium
- cisco ios and ios xe software, ios, ios xe +2 moreCisco IOS and IOS XE Software Network Plug-and-Play Agent Certificate Validation Vulnerability7.4 High
- hp remote graphics softwareA potential vulnerability has been identified in HP Remote Graphics Software’s certificate...9.1 Critical
- the kubevirt project kubevirt/virt-cdi-importer, kubevirt containerized data importer +1 moreKubevirt/virt-cdi-importer, versions 1.4.0 to 1.5.3 inclusive, were reported to disable TLS...7.4 High
- heimdalsecurity thorHeimdal Thor Agent 2.5.17x before 2.5.173 does not verify X.509 certificates from TLS servers,...9.1 Critical
- splunk software development kitsplunk-sdk does not properly verify untrusted TLS server certificates8.1 High
- puppet discoveryPreviously, Puppet Discovery was shipped with a default generated TLS certificate in the nginx...9.8 Critical
- puppet chlorideImproper Certificate Validation in chloride7.5 High
- mastercard qkr\! with masterpassThe MasterCard Qkr! app before 5.0.8 for iOS has Missing SSL Certificate Validation. NOTE: this...5.9 Medium
- intel silicon reference firmware, platform sample firmware, intel corporation platform sample / silicon reference firmware +2 moreImproper certificate validation in Platform Sample/ Silicon Reference firmware for 8th Generation...6.8 Medium
- pivotal apps manager, application service +1 moreApps Manager unverified SSL certs in Cloud Controller proxy8.0 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreOn BIG-IP 14.1.0-14.1.0.1, TMM may restart and produce a core file when validating SSL...9.1 Critical
- cordaware bestinformedCordaware bestinformed Microsoft Windows client before 6.2.1.0 is affected by insecure SSL...9.8 Critical
- cisco small business spa112 series ip phones, small business spa500 series ip phones, small business spa525 series ip phones +15 more +17 moreCisco SPA112, SPA525, and SPA5x5 Series IP Phones Certificate Validation Vulnerability6.5 Medium
- bosch smart cameraAn issue was discovered in the Bosch Smart Camera App before 1.3.1 for Android. Due to improperly...7.5 High
- cisco prime infrastructureCisco Prime Infrastructure Certificate Validation Vulnerability7.4 High
- marlam mpop, msmtp +1 moreIn msmtp 1.8.2 and mpop 1.4.3, when tls_trust_file has its default configuration, certificate...5.3 Medium
- jenkins active directory, jenkins project active directory plugin +1 moreJenkins Active Directory Plugin Improper certificate validation with StartTLS7.4 High
- hclsoftware bigfix complianceIBM BigFix Compliance 1.7 through 1.9.91 (TEMA SUAv1 SCA SCM) does not validate, or incorrectly...3.7 Low
- dovecot, canonical ubuntu linux, opensuse leap +2 moreIt was discovered that Dovecot before versions 2.2.36.1 and 2.3.4.1 incorrectly handled client...7.7 High
- apache airflowImproper Certificate Validation in Apache Airflow7.5 High
- powerdns recursor, power dns pdns-recursor +1 moreAn issue has been found in PowerDNS Recursor versions 4.1.x before 4.1.9 where records in the...3.7 Low
- dell networking os10DSA-2019-001: Dell Networking OS10 Improper Certificate Validation Vulnerability7.4 High
- ricoh company, ltd. interactive whiteboard, ricoh d2200 firmware, d5500 firmware +6 more +8 moreThe RICOH Interactive Whiteboard D2200 V1.3 to V2.2, D5500 V1.3 to V2.2, D5510 V1.3 to V2.2, the...5.9 Medium
- mizuho bank, ltd. direct app for android, mizuhobank mizuho direct application +1 moreThe Mizuho Direct App for Android version 3.13.0 and earlier does not verify server certificates,...5.9 Medium
- apache thrift, debian linux, f5 traffix signaling delivery controller +2 more +4 moreImproper Input Validation in Apache Thrift7.5 High
- webroot brightcloudAn exploitable vulnerability exists in the HTTP client functionality of the Webroot BrightCloud...8.1 High
- ibm security guardiumIBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 does not validate, or...3.7 Low
- golang go, [unknown] golang, opensuse leap +2 moreThe crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of...5.9 Medium
- powermanager kt mc01507l z-wave s0 firmwareAn issue was discovered on KT MC01507L Z-Wave S0 devices. It occurs because HPKP is not...5.3 Medium
- ibm qradar siem, qradar incident forensics +1 moreIBM QRadar SIEM 7.2.8 and 7.3 does not validate, or incorrectly validates, a certificate. This...3.7 Low
- softbank, ntt docomo, kddi multiple +message apps (softbank +message app for android prior to version 10.1.7, softbank +message app for ios prior to version 1.1.23, ntt docomo +message app for android prior to version 42.40.2800, ntt docomo +message app for ios prior to version 1.1.23, kddi +message app for android prior to version 1.0.6, and kddi +message app for ios prior to version 1.1.23), kddi \+ message +1 moreMultiple +Message Apps (Softbank +Message App for Android prior to version 10.1.7, Softbank ...5.9 Medium
- apache qpid proton-jImproper Certificate Validation in proton-j7.4 High
- sennheiser headsetup, microsoft windows 10, windows 7 +6 more +8 moreSennheiser HeadSetup 7.3.4903 places Certification Authority (CA) certificates into the Trusted...7.5 High
- f5 big-ip access policy manager, f5 networks, inc. big-ip (apm) +1 moreIn some situations on BIG-IP APM 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, or 11.6.0-11...7.5 High
- polycom unified communications software, vvx 500 firmware, vvx 601 firmware +2 morePolycom VVX 500 and 601 devices 5.8.0.12848 and earlier allows man-in-the-middle attackers to...5.9 Medium
- audiocodes 440hd firmware, 450hd firmware +1 moreAudioCodes 440HD and 450HD devices 3.1.2.89 and earlier allows man-in-the-middle attackers to...5.9 Medium
- cisco sd-wan solution, sd-wan +1 moreCisco SD-WAN Solution Certificate Validation Bypass Vulnerability9.8 Critical
- Show moreLoading…