CWE-295: Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.
A kind of CWE-287 Improper Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- proofpoint insider threat managementITM MacOS Agent Improper Certificate Validation7.5 High
- anaconda anaconda3Anaconda 3 2023.03-1-Linux allows local users to disrupt TLS certificate validation by modifying...4.7 Medium
- samsung emailImproper Certificate Validation in Samsung Email prior to version 6.1.82.0 allows remote attacker...8.1 High
- apache software foundation nifi minifi c++, apache nifi minifi c\+\+ +1 moreApache NiFi MiNiFi C++: Incorrect Certificate Validation in InvokeHTTP for MiNiFi C++5.9 Medium
- fortinet fortianalyzer, fortimanager, fortios +1 more +3 moreAn improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6...5.4 Medium
- apache airflow, apache software foundation airflow imap provider, airflow smtp provider +2 more +4 moreApache Airflow SMTP Provider, Apache Airflow IMAP Provider, Apache Airflow: SMTP/IMAP client components allowed MITM due to missing Certificate Validation5.9 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 moreCertificate validation issue in MongoDB Server running on Windows or macOS5.3 Medium
- veritas netbackup snapshot managerA vulnerability was discovered in Veritas NetBackup Snapshot Manager before 10.2.0.1 that allowed...9.8 Critical
- google androidIn multiple locations, there are root CA certificates which need to be disabled. This could lead...7.5 High
- matrix sydentSydent does not verify email server certificates9.3 Critical
- hitachi device managerImproper Validation of Certificate Vulnerability in Hitachi Device Manager5.6 Medium
- wolfsslTLS 1.3 client issue handling malicious server when not including a KSE and PSK extension9.1 Critical
- mattermost, mattermost ios app +1 moreLack of server certificate validation in websockets connection8.1 High
- cryptography.io cryptographycryptography mishandles SSH certificates7.5 High
- bluemark dronescout ds230, dronescout ds230 firmware, ds230 +2 moreMissing TLS (HTTPS) certificate validation during firmware update in DroneScout ds230 Remote ID receiver from BlueMark Innovations8.1 High
- milesight ur32l, ur32l firmware +1 moreA misconfiguration vulnerability exists in the urvpn_client functionality of Milesight UR32L v32...4.2 Medium
- bouncycastle bc-javaBouncy Castle For Java LDAP injection vulnerability5.3 Medium
- redhat keycloak, red hat single sign-on 7, single sign-on 7.6 for rhel 7 +5 more +7 moreKeycloak: oauth client impersonation5.5 Medium
- dell emc vxrail appliance, vxrail d560 firmware, vxrail d560f firmware +43 more +45 moreDell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability...2.7 Low
- 4d serverAn information disclosure vulnerability in 4D SAS 4D Server Application v17, v18, v19 R7 and...7.5 High
- jenkins checkmarx, jenkins project checkmarx plugin +1 moreSSL/TLS certificate validation disabled by default in Jenkins Checkmarx Plugin8.1 High
- fortinet fortios, fortiproxy +1 moreAn improper certificate validation vulnerability [CWE-295] in FortiOS 6.2 all versions, 6.4 all...4.4 Medium
- runsystem jiyu kukan toku-toku coupon, runsystem co.,ltd. jiyu kukan toku-toku coupon app for ios, and jiyu kukan toku-toku coupon app for android +1 moreJiyu Kukan Toku-Toku coupon App for iOS versions 3.5.0 and earlier, and Jiyu Kukan Toku-Toku...4.8 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreThe error page for sites with invalid TLS certificates was missing the activation-delay Firefox...3.1 Low
- qt, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6...5.3 Medium
- dell networkerDell NetWorker, contains an Improper Validation of Certificate with Host Mismatch vulnerability...5.0 Medium
- keycloak, redhat build of quarkus, jboss a-mq +2 more +4 moreKeycloak Untrusted Certificate Validation vulnerability6.5 Medium
- cloudfoundry loggregator-agent, capi-release, cf-deployment +2 moreCloud foundry instances having CAPI version between 1.140 and 1.152.0 along with loggregator...8.1 High
- acronis agent, cyber protect 15, cyber protect +2 moreSensitive information disclosure and manipulation due to improper certification validation. The...4.2 Medium
- acronis agent, cyber protect 15, cyber protect +2 moreSensitive information disclosure and manipulation due to improper certification validation. The...4.2 Medium
- haxx curl, apple macos, debian linux +7 more +9 moreAn improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports...5.9 Medium
- jenkins saml single sign on, jenkins project saml single sign on(sso) plugin +1 moreJenkins SAML Single Sign On(SSO) Plugin unconditionally disables SSL/TLS certificate validation3.7 Low
- optoma 1080pstxAn authentication bypass in Optoma 1080PSTX C02 allows an attacker to access the administration...9.8 Critical
in-totoPyPIin-toto: PGP trust model not (fully) consideredNo score- schweitzer engineering laboratories sel-2241 rtac module, sel-3350, sel-3505 +17 more +19 moreImproper Certificate Validation4.7 Medium
- seiko-sol skybridge basic mb-a130 firmware, skybridge mb-a200 firmware, seiko solutions inc. skybridge mb-a200 and skybridge basic mb-a130 +2 moreImproper following of a certificate's chain of trust exists in SkyBridge MB-A200 firmware Ver. 01...6.5 Medium
- ibm websphere application serverIBM WebSphere Application Server information disclosure4.8 Medium
- f5 big-ip edge client, big-ip access policy manager +1 moreBIG-IP Edge Client for Windows and macOS vulnerability7.4 High
- lenovo baiyingA certificate validation vulnerability exists in the Baiying Android application which could lead...6.2 Medium
- opentext bizmanagerOpenText BizManager before 16.6.0.1 does not perform proper validation during the change-password...9.8 Critical
- perl, http\ \ +1 moreHTTP::Tiny 0.082, a Perl core module since 5.13.9 and available standalone on CPAN, has an...8.1 High
- gitlab\ \GitLab::API::v4 through 0.26 does not verify TLS certificates when connecting to a GitLab server,...5.9 Medium
- cpanpm project cpanpm, perl +1 moreCPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.8.1 High
- nanoleaf firmwareNanoleaf firmware v7.1.1 and below is missing an SSL certificate, allowing attackers to execute...9.8 Critical
- strongswanstrongSwan 5.9.8 and 5.9.9 potentially allows remote code execution because it uses a variable...9.8 Critical
- openbsd libressl, openbsd +1 morex509/x509_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 errata 006, allows...9.8 Critical
- jenkins neuvector vulnerability scanner, jenkins project neuvector vulnerability scanner plugin +1 moreJenkins NeuVector Vulnerability Scanner Plugin disables SSL/TLS certificate and hostname validation5.3 Medium
- jenkins image tag parameter, jenkins project image tag parameter plugin +1 moreJenkins Image Tag Parameter Plugin improperly introduces option to opt out of SSL/TLS certificate validation6.5 Medium
- mozilla thunderbirdOCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted...6.5 Medium
- openbsd libressl, openbsd +1 moreAn issue was discovered in x509/x509_verify.c in LibreSSL before 3.6.1, and in OpenBSD before 7.2...5.3 Medium
- Show moreLoading…