CWE-295: Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.
A kind of CWE-287 Improper Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- python urllib3, fedoraproject fedora, oracle peoplesoft enterprise peopletools +3 more +5 moreUsing default SSLContext for HTTPS requests in an HTTPS proxy doesn't verify certificate hostname for proxy connection6.5 Medium
- teluu pjsip, pjsip pjproject +1 moreExisting TLS connections can be reused without checking remote hostname6.8 Medium
- netgear r7800, r7800 firmware, br200 firmware +41 more +43 moreThis vulnerability allows network-adjacent attackers to compromise the integrity of downloaded...6.5 Medium
- cncf spireLegacy Node API Allows Impersonation in github.com/spiffe/spire/pkg/server/endpoints/node8.1 High
- gitlabStarting with version 13.7 the Gitlab CE/EE editions were affected by a security issue related to...5.9 Medium
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt Improper SSL Certificate Validation7.4 High
- saltstack salt, debian linux, fedoraproject fedora +2 moreSaltStack Salt Improper Certificate Validation5.9 Medium
- keylime, fedoraproject fedora +1 moreA flaw was found in keylime 5.8.1 and older. The issue in the Keylime agent and registrar code invalidates the cryptographic chain of trust from the Endorsement Key certificate to agent attestations.9.8 Critical
- mongodb java driver, mongodb inc. mongo-java-driver, mongodb-driver +3 more +5 moreMongoDB Java driver client-side field level encryption not verifying KMS host name6.4 Medium
- mongodb inc. node.js driver mongodb-client-encryption module, mongodb client encryption +1 moreMongoDB Node.js client side field level encryption library may not be validating KMS certificate6.4 Medium
- cira canadian shieldThe CIRA Canadian Shield app before 4.0.13 for iOS lacks SSL Certificate Validation.5.9 Medium
- microsoft stunnelA flaw was found in stunnel before 5.57, where it improperly validates client certificates when...7.5 High
- tweetstream project tweetstreamImproper Certificate Validation in TweetStream5.9 Medium
- twitter-stream project twitter-streamImproper Certificate Validation in twitter-stream5.9 Medium
- canarymail canary mail, libmailcore mailcore2 +1 morecore/imap/MCIMAPSession.cpp in Canary Mail before 3.22 has Missing SSL Certificate Validation for...7.4 High
- opcfoundation ua-.netstandardImproper Certificate Validation in OPCFoundation.NetStandard.Opc.Ua.Core4.4 Medium
- elecom co.,ltd. wrc-300febk-s, elecom wrc-300febk-s firmware +1 moreELECOM WRC-300FEBK-S contains an improper certificate validation vulnerability. Via a man-in-the...4.8 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to obtain...6.9 Medium
- chainsafe ethermintAuthentication bypass by capture-replay in github.com/cosmos/ethermint7.5 High
- tenable nessus amazon machine imageNessus AMI versions 8.12.0 and earlier were found to either not validate, or incorrectly validate...5.9 Medium
- cisco unified computing system central softwareCisco Unified Computing System Central Software Improper Certificate Validation Vulnerability4.3 Medium
- google androidSquare OkHttp can accept the wrong certificate7.5 High
- wolfsslDoTls13CertificateVerify in tls13.c in wolfSSL through 4.6.0 does not cease processing for...8.1 High
- wekan project wekanpackages/wekan-ldap/server/ldap.js in Wekan before 4.87 can process connections even though they...8.1 High
- ti code composer studio intgrated development environmentjxbrowser in TI Code Composer Studio IDE 8.x through 10.x before 10.1.1 does not verify X.509...5.3 Medium
- cisco data center network managerCisco Data Center Network Manager Certificate Validation Vulnerabilities7.5 High
- cisco data center network managerCisco Data Center Network Manager Certificate Validation Vulnerabilities7.5 High
- dockerDocker Desktop Community before 2.5.0.0 on macOS mishandles certificate checking, leading to...7.8 High
- erlang erlang\/otp, fedoraproject fedora +1 moreAn issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts...7.5 High
- sass-lang node-sassImproper Certificate Validation in node-sass5.3 Medium
- redhat jboss core services httpdA flaw was found in JBCS httpd in version 2.4.37 SP3, where it uses a back-end worker SSL...5.4 Medium
- ptarmigan project ptarmiganPtarmigan before 0.2.3 lacks API token validation, e.g., an "if (token === apiToken) {return true...7.5 High
- backblazeBackblaze for Windows before 7.0.1.433 and Backblaze for macOS before 7.0.1.434 suffer from...7.8 High
- nec ism server, nec corporation management software for nec storage disk array system +1 moreiSM client versions from V5.1 prior to V12.1 running on NEC Storage Manager or NEC Storage...4.8 Medium
- icingaSecurity update for icinga29.1 Critical
- apple mac os x, macos, debian linux +17 more +19 morecurl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...7.5 High
- canonical software-propertiessoftware-properties incorrectly validated TLS certificates6.8 Medium
- tesla model x firmwareTesla Model X vehicles before 2020-11-23 do not perform certificate validation during an attempt...4.6 Medium
- primekey ejbcaAn issue exists in PrimeKey EJBCA before 7.4.3 when enrolling with EST while proxied through an...4.3 Medium
- nextcloud socialMissing validation of server certificates for out-going connections in Nextcloud Social < 0.4.0...7.4 High
- golang go, fedoraproject fedora, netapp cloud insights telegraf agent +1 more +3 moreGo before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.7.5 High
- synopsys hub-rest-api-pythonImproper Certificate Validation in blackduck7.5 High
- synology diskstation manager (dsm), diskstation manager, skynas firmware +2 moreImproper certificate validation vulnerability in OpenVPN client in Synology DiskStation Manager ...8.3 High
- synology router manager, router manager (srm) +1 moreImproper certificate validation vulnerability in OpenVPN client in Synology Router Manager (SRM)...8.3 High
- pulsesecure pulse secure desktop clientA vulnerability in the Pulse Secure Desktop Client < 9.1R9 could allow the attacker to perform a...7.5 High
- apple ios, macos, watchos +2 more +4 moreA validation issue existed in Trust Anchor Management. This issue was addressed with improved...9.8 Critical
- apple macos, mac os x +1 moreAn issue existed in the handling of S-MIME certificates. This issue was addressed with improved...3.3 Low
- apple ios, ipados, macos +4 more +6 moreA certificate validation issue existed when processing administrator added certificates. This...9.1 Critical
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Software Denial of Service Vulnerability5.3 Medium
- vmware vcenter server, cloud foundation +1 moreVMware vCenter Server (6.7 before 6.7u3, 6.6 before 6.5u3k) contains a session hijack...7.4 High
- Show moreLoading…