CWE-295: Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.
A kind of CWE-287 Improper Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- netgear rax30, rax30 firmware +1 moreNETGEAR RAX30 Improper Certificate Validation Remote Code Execution Vulnerability7.5 High
- nextcloud desktop, kiteworks security-advisories +1 moreNextcloud Desktop client behaves incorrectly if the initial end-to-end-encryption signature is empty4.2 Medium
- cisco telepresence video communication server (vcs) expressway, telepresence video communication server +1 moreCisco Expressway Series and Cisco TelePresence VCS Improper Certificate Validation Vulnerability7.4 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper Certificate Validation Enables Impersonation of a Legitimate GlobalProtect User5.3 Medium
- icinga, debian linux, icinga icinga2 +1 more +3 moreIcinga 2 has a TLS Certificate Validation Bypass for JSON-RPC and HTTP API Connections9.8 Critical
- alecto ivm-100 firmwareAn issue was discovered on Alecto IVM-100 2019-11-12 devices. The device uses a custom UDP...9.8 Critical
- qbittorrentqBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors.8.1 High
- hcl software appscan sourceHCL AppScan Source is affected by an expired TLS/SSL certificate4.8 Medium
- ibm concertIBM Concert improper certificate validation5.9 Medium
- dell secure connect gateway (scg) 5.0 appliance - srs, secure connect gateway +1 moreDell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains an Improper...5.5 Medium
- bitdefender total securityInsecure Trust of Basic Constraints certificate in Bitdefender Total Security HTTPS Scanning (VA-11210)8.6 High
- bitdefender total securityInsecure Trust of certificates using collision hash functions in Bitdefender Total Security HTTPS Scanning (VA-11239)8.6 High
- bitdefender total securityHTTPS Certificate Validation Issue in Bitdefender Safepay (VA-11167)8.6 High
- bitdefender total securityInsecure Trust of DSA-Signed Certificates in Bitdefender Total Security HTTPS Scanning (VA-11166)8.6 High
- bitdefender total securityInsecure Trust of Self-Signed Certificates in Bitdefender Total Security HTTPS Scanning (VA-11164)8.6 High
- bitdefender total securityImproper Certificate Validation in Bitdefender Total Security HTTPS Scanning (VA-11158)8.6 High
- astroxnetwork agent dartAgent Dart missing certificate verification checks8.7 High
- No product listedAn issue was discovered in Samsung eMMC with KLMAG2GE4A and KLM8G1WEMB firmware. Code bypass...4.9 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Secure Channel Spoofing Vulnerability7.4 High
- ewelink zigbee bridge proFirmware extraction and Hardware SSL Pinning Bypass7.0 High
- cisco nexus dashboard orchestratorCisco Nexus Dashboard Orchestrator SSL Certificate Validation Vulnerability5.9 Medium
- puppet peadm forge moduleSecurity Misconfiguration in Forge module PEADM5.4 Medium
- tomtretbar mikrotikLack of TLS validation in plugin MikroTik on Checkmk Exchange4.9 Medium
- suse rancherRancher agents can be hijacked by taking over the Rancher Server URL8.0 High
- hcl software traveler for microsoft outlook, hcltech traveler +1 moreHCL Traveler for Microsoft Outlook (HTMO) is susceptible to an application modification vulnerability6.7 Medium
- ibm storage defender, storage defender - resiliency service +1 moreIBM Storage Defender improper certificate validation5.9 Medium
- planet fitness workouts, planetfitness planet fitness workouts +1 morePlanet Fitness Workouts mobile apps do not properly validate TLS certificates8.7 High
- canonical anbox cloudAnbox Management Service, in versions 1.17.0 through 1.23.0, does not validate the TLS...7.5 High
- curl, debian linux, netapp active iq unified manager +26 more +28 moreOCSP stapling bypass with GnuTLS6.5 Medium
- fortinet forticlient, forticlientlinux, forticlientmac +2 more +4 moreAAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7...6.4 Medium
- fortinet forticlient, forticlientandroid, forticlientios +3 more +5 moreAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions...4.6 Medium
nategood/httpfulPackagistHttpful is Missing Certificate Validation6.9 Medium- veeam backup and recovery, backup \& replication +1 moreAn improper certificate validation vulnerability in TLS certificate validation allows an attacker...8.3 High
- qnap qumagieQuMagie1.0 Low
- trustedfirmware mbed tlsAn issue was discovered in Mbed TLS 3.x before 3.6.1. With TLS 1.3, when a server enables...9.8 Critical
- redhat kroxylicious, red hat streams for apache kafka, streams for apache kafka 2.8.0 +2 moreKroxylicious: missing upstream kafka tls hostname verification5.9 Medium
- safie inc. qbic cloud cc-2l, one, safie qbic cloud cc-2\/2l firmware +1 more +3 moreQBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and earlier do not properly validate...6.8 Medium
- diffie-hellman key exchange project key exchange, siemens ruggedcom rst2428p, scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family +16 more +18 moreValidating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an...7.5 High
- nicmx fort-validatorAn issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a ...7.5 High
- collaboraonline onlineCollabora Online's remote host TLS certificates are not fully verified8.2 High
- redhat openstack platform, red hat openstack platform 16.1, openstack platform 16.2 +2 more +4 moreOpenstack-tripleo-common: rhosp director disables tls verification for registry mirrors8.1 High
- haxx libcurl, google nest speakers, nest mini firmware +2 moreThe libcurl CURLOPT_SSL_VERIFYPEER option was disabled on a subset of requests made by Nest...5.9 Medium
- ibm websphere application server, websphere application liberty +1 moreIBM WebSphere Application Server Libery information disclosure5.3 Medium
- ibm websphere application serverIBM WebSphere Application Server information disclosure5.3 Medium
- ivanti itsm, neurons for itsm +1 moreImproper certificate validation in Ivanti ITSM on-prem and Neurons for ITSM Versions 2023.4 and...8.3 High
- n-able ecosystem agentEcosystem Agent Insufficient Transport Layer Security3.8 Low
- arubanetworks arubaos, instant, hewlett packard enterprise (hpe) hpe aruba networking instantos and aruba access points running arubaos 10 +1 more +3 moreUnauthenticated Stack-Based Buffer Overflow Remote Command Execution (RCE) in the AP Certificate Management Service Accessed by the PAPI Protocol9.8 Critical
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 8 advanced virtualization +1 more +3 moreLibnbd: nbd server improper certificate validation7.4 High
- libreofficeAbility to trust not validated macro signatures removed in high security mode7.8 High
- johnson controls exacqvision, johnsoncontrols exacqvision server +1 moreexacqVison - TLS certificate validation6.4 Medium
- Show moreLoading…