CWE-295: Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.
A kind of CWE-287 Improper Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- juniper mist cloud uiJuniper Networks Mist Cloud UI: SAML authentication certificate vulnerability.8.3 High
- apache calciteMissing Authentication for Critical Function in Apache Calcite5.9 Medium
- tigervnc, debian linux, opensuse leap +2 moreIn rfb/CSecurityTLS.cxx and rfb/CSecurityTLS.java in TigerVNC before 1.11.0, viewers mishandle...8.1 High
- oauth-ruby project oauth-rubyImproper Certificate Validation in oauth ruby gem7.4 High
- trend micro security (consumer), trend micro, inc. micro security (consumer), trendmicro antivirus\+ 2019 +4 more +6 moreAn incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 ...7.5 High
- trend micro security (consumer), trend micro, inc. micro security (consumer), trendmicro antivirus\+ 2019 +4 more +6 moreAn incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 ...7.5 High
- ibm security secret serverIBM Security Secret Server prior to 10.9 could allow an attacker to bypass SSL security due to...3.1 Low
- meltytech shotcutIn mainwindow.cpp in Shotcut before 20.09.13, the upgrade check misuses TLS because of...5.9 Medium
- bosch smart homeImproper Certificate Validation in Bosch Smart Home System App for iOS6.8 Medium
- jenkins email extension, jenkins project email extension plugin +1 moreMissing hostname validation in Email Extension Plugin4.8 Medium
- jenkins mailer, jenkins project mailer plugin +1 moreImproper Validation of Certificate with Host Mismatch in Jenkins Mailer Plugin4.8 Medium
- primekey ejbcaAn issue was discovered in PrimeKey EJBCA 6.x and 7.x before 7.4.1. When using a client...7.3 High
- gfi software helpdeskThe vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this...4.2 Medium
ezseed-transmissionnpmInsecure Defaults Leads to Potential MITM in ezseed-transmission4.2 Medium- philips dtr3502bfta dvb-t2 firmware, thomsonstb tht741fta firmware +1 moreThe RSS application on THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes...5.9 Medium
- scalyr agentScalyr Agent 2 Missing SSL Certificate Validation9.8 Critical
- scalyr agentScalyr Agent Missing SSL Certificate Validation9.8 Critical
- gnome geary, fedoraproject fedora +1 moreGNOME Geary before 3.36.3 mishandles pinned TLS certificate verification for IMAP and SMTP...5.9 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreIn versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5...7.4 High
- akamai enterprise application accessEnterprise Access Client Auto-Updater allows for Remote Code Execution prior to version 2.0.1.9.8 Critical
- asus rt-ac1900p firmwareAn issue was discovered on ASUS RT-AC1900P routers before 3.0.0.4.385_20253. The router accepts...5.9 Medium
- octopus serverAn issue was discovered in Octopus Deploy 3.4. A deployment target can be configured with an...4.3 Medium
- wolfsslwolfSSL before 4.5.0 mishandles TLS 1.3 server data in the WAIT_CERT_CR state, within...6.8 Medium
- emclient em clienteM Client before 7.2.33412.0 automatically imported S/MIME certificates and thereby silently...4.8 Medium
- freron mailmateMailMate before 1.11 automatically imported S/MIME certificates and thereby silently replaced...5.9 Medium
- cs2-network p2pCS2 Network P2P through 3.x, as used in millions of Internet of Things devices, suffers from an...8.1 High
- nlnetlabs routinatorAn issue was discovered in NLnet Labs Routinator 0.1.0 through 0.7.1. It allows remote attackers...7.4 High
- faye faye-websocketMissing TLS certificate verification in Faye Websocket8.0 High
- fayeMissing TLS certificate verification in Faye8.0 High
- ripe rpki validator 3** DISPUTED ** An issue was discovered in RIPE NCC RPKI Validator 3.x through 3.1-2020.07.06.14...7.5 High
- ripe rpki validator 3** DISPUTED ** An issue was discovered in RIPE NCC RPKI Validator 3.x before 3.1-2020.07.06.14.28...9.1 Critical
- ripe rpki validator 3** DISPUTED ** An issue was discovered in RIPE NCC RPKI Validator 3.x through 3.1-2020.07.06.14...7.4 High
- netgear r6700, r6700 firmware +1 moreThis vulnerability allows network-adjacent attackers to compromise the integrity of downloaded...7.5 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker...4.3 Medium
- hp mse msg gw application e-ltuHPE has found a potential Remote Access Restriction Bypass in HPE MSE Msg Gw application E-LTU...6.6 Medium
- graylogImproper Certificate Validation in Graylog8.1 High
- golang go, opensuse leap +1 moreIn Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verify may lack a check on the...5.3 Medium
- openldap, redhat enterprise linux, mcafee policy auditor +2 more +4 morelibldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third...4.2 Medium
- dogtagpkiIn Dogtag PKI through 10.8.3, the pki.client.PKIConnection class did not enable python-requests...6.8 Medium
- red-gate sql monitorIn Redgate SQL Monitor 7.1.4 through 10.1.6 (inclusive), the scope for disabling some TLS...5.9 Medium
- traefikImproper Authentication7.5 High
- f5 nginx controllerIn versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, when users run the command displayed in NGINX...5.4 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen performing add-on updates, certificate chains terminating in non-built-in-roots were...6.5 Medium
- trojita project trojitaMSA/SMTP.cpp in Trojita before 0.8 ignores certificate-verification errors, which allows man-in...5.9 Medium
- dell emc unisphere for powermax, emc unisphere for powermax virtual appliance, powermax os +1 more +3 moreDell EMC Unisphere for PowerMax versions prior to 9.1.0.17, Dell EMC Unisphere for PowerMax...7.4 High
- sophos secure emailThe Sophos Secure Email application through 3.9.4 for Android has Missing SSL Certificate...5.9 Medium
- vipre password vaultThe ThreatTrack VIPRE Password Vault app through 1.100.1090 for iOS has Missing SSL Certificate...5.9 Medium
- mattermost serverMattermost Server does not check if cookies are used over SSL5.3 Medium
- mattermost serverMattermost Server does not restrict SAML certificate path for System Administrators4.9 Medium
- mattermost serverMattermost Server SAML implementation does not require encryption or signature verification as default7.5 High
- Show moreLoading…