CWE-295: Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.
A kind of CWE-287 Improper Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- openfortivpn project openfortivpn, fedoraproject fedora, opensuse backports sle +1 more +3 moreAn issue was discovered in openfortivpn 1.11.0 when used with OpenSSL before 1.0.2. tunnel.c...9.1 Critical
- openfortivpn project openfortivpn, fedoraproject fedora, opensuse backports sle +1 more +3 moreAn issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c...5.3 Medium
- openfortivpn project openfortivpn, fedoraproject fedora, opensuse backports sle +1 more +3 moreAn issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c...5.3 Medium
- puppet, puppet agent, puppetpu puppet agent +2 moreImproper Certificate Validation in Puppet6.5 Medium
- globalpayments php sdkImproper Certificate Validation in Heartland & Global Payments PHP SDK5.9 Medium
- nodejs node, node.js, debian linux +8 more +10 moreImproper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when...7.5 High
- hashicorp nomadImproper Certificate Validation in HashiCorp Nomad9.8 Critical
- fuji xerox co.,ltd. awms mobile app, fujixerox apeosware management suite +1 moreThe AWMS Mobile App for Android 2.0.0 to 2.0.5 and for iOS 2.0.0 to 2.0.8 does not verify X.509...5.9 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead...7.4 High
- nttdata mypallete, 77bank 77 bank, ashikagabank ashigin +7 more +9 moreAndroid App 'MyPallete' and some of the Android banking applications based on 'MyPallete' do not...7.4 High
- gnome networkmanager, opensuse, suse linux enterprise desktop +1 more +3 moreNetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication...6.8 Medium
- suse studio onsite, susestudio-ui-server +1 moreInsecure handling of repodata and packages in SUSE Studio onlite3.7 Low
- fuji xerox co.,ltd. kantan netprint app for android, fujixerox easy netprint +1 moreThe kantan netprint App for Android 2.0.3 and earlier does not verify X.509 certificates from...7.4 High
- fuji xerox co.,ltd. kantan netprint app for ios, fujixerox easy netprint +1 moreThe kantan netprint App for iOS 2.0.2 and earlier does not verify X.509 certificates from servers...7.4 High
- fuji xerox co.,ltd. netprint app for ios, fujixerox netprint +1 moreThe netprint App for iOS 3.2.3 and earlier does not verify X.509 certificates from servers, which...7.4 High
- mozilla firefoxMozilla Firefox prior to 3.6 has a DoS vulnerability due to an issue in the validation of...6.5 Medium
- vmware workspace one sdk, workspace one boxer, workspace one content +6 more +8 moreVMware Workspace ONE SDK and dependent mobile application updates address sensitive information...5.9 Medium
- apache beamImproper Certificate Validation in Apache Beam7.5 High
- cisco ironport web security applianceCisco IronPort Web Security Appliance does not check for certificate revocation which could lead...5.9 Medium
- microsoft windows, golang go, microsoft windows 10 version 1903 for 32-bit systems +20 more +22 moreA spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic...8.1 High
- ovirt-engine-sdk-pythonovirt-engine-sdk-python improper validation of hostname in x.509 certificate5.9 Medium
- clusterlabs fence-agentsIn fence-agents before 4.0.17 does not verify remote SSL certificates in the fence_cisco_ucs.py...5.9 Medium
- cumin, redhat mrg management console +1 moreAn import error was introduced in Cumin in the code refactoring in r5310. Server certificate...7.5 High
- nippon television network corporation ntv news24, ntv news 24 +1 moreThe NTV News24 prior to Ver.3.0.0 does not verify X.509 certificates from SSL servers, which...7.4 High
- f5 big-ip asm, big-ip application security manager +1 moreOn versions 15.0.0-15.0.1.1, the BIG-IP ASM Cloud Security Services profile uses a built-in...7.4 High
- jenkins websphere deployer, jenkins project websphere deployer plugin +1 moreSSL/TLS certificate validation globally and unconditionally disabled by Jenkins WebSphere Deployer Plugin7.1 High
- jenkins spira importer, jenkins project spira importer plugin +1 moreImproper Certificate Validation in Jenkins Spira Importer Plugin8.2 High
- puppet serverPrevious versions of Puppet Agent didn't verify the peer in the SSL connection prior to...5.4 Medium
- barco clickshare cs-100 firmware, clickshare cse-200\+ firmware, clickshare cse-200 firmware +1 more +3 moreBarco ClickShare Button R9861500D01 devices before 1.9.0 have Improper Following of a Certificate...9.8 Critical
- debian duplicity, linux, opensuse +2 moreduplicity 0.6.24 has improper verification of SSL certificates7.5 High
- amazon audibleThe Audible application through 2.34.0 for Android has Missing SSL Certificate Validation,...5.9 Medium
- keycloakKeycloak Authentication Error9.3 Critical
- mozilla network security services, nss, siemens ruggedcom rox mx5000 firmware +7 more +9 moreIn Network Security Services before 3.44, a malformed Netscape Certificate Sequence can cause NSS...7.5 High
- dirmngr, debian linux, gnupg +1 more +3 moredirmngr before 2.1.0 improperly handles certain system calls, which allows remote attackers to...5.3 Medium
- proftpd, fedoraproject fedora +1 moreAn issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b. Failure to check for the...7.5 High
- proftpdAn issue was discovered in tls_verify_crl in ProFTPD before 1.3.6. A wrong iteration variable,...7.5 High
- [unknown] vdsmvdsm: certificate generation upon node creation allowing vdsm to start and serve requests from...7.5 High
- wolfsslwolfssl before 3.2.0 does not properly authorize CA certificate for signing other certificates.7.5 High
- wolfsslwolfssl before 3.2.0 does not properly issue certificates for a server's hostname.7.5 High
- nusoap, debian linux +1 morenuSOAP before 0.7.3-5 does not properly check the hostname of a cert.7.5 High
- openwrtAn exploitable information leak vulnerability exists in the ustream-ssl library of OpenWrt,...4.0 Medium
- openwrtAn exploitable information leak vulnerability exists in the ustream-ssl library of OpenWrt,...4.0 Medium
- offlineimap, debian linux +1 moreofflineimap before 6.3.4 added support for SSL server certificate validation but it is still...9.8 Critical
- offlineimap, debian linux +1 moreofflineimap before 6.3.2 does not check for SSL server certificate validation when "ssl = yes"...5.9 Medium
- redhat vdsclient, vdsm and vdsclient and vdsclient, redhat enterprise virtualization +1 more +3 morevdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate...5.9 Medium
- twistedPython Twisted trustRoot is not respected in HTTP client7.5 High
- redhat enterprise virtualization managerIn RHEV-M VDC 2.2.0, it was found that the SSL certificate was not verified when using the client...3.1 Low
- broadcom brocade sannav, brocade sannav +1 moreA vulnerability, in The ReportsTrustManager class of Brocade SANnav versions before v2.0, could...7.4 High
- openstack compute, keystone, redhat openstack +1 more +3 moreOpenStack Keystone and other components vulnerable to Improper Certificate Validation5.9 Medium
- systemd project systemd, fedoraproject fedora +1 moresystemd 239 through 243 accepts any certificate signed by a trusted certificate authority for DNS...9.8 Critical
- Show moreLoading…