CWE-295: Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.
A kind of CWE-287 Improper Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- synology diskstation manager (dsm), diskstation manager +1 moreImproper certificate validation vulnerability in the LDAP utilities in Synology DiskStation...7.5 High
- fortinet fortinac-fAn improper certificate validation vulnerability [CWE-295] in FortiNAC-F version 7.2.4 and below...4.4 Medium
- fortinet fortiportalAn improper certificate validation vulnerability [CWE-295] in FortiPortal version 7.4.0, version...4.4 Medium
- gallagher command centre serverImproper Certificate Validation (CWE-295) in the Gallagher Command Centre SALTO integration...8.7 High
- gallagher milestone integration pluginImproper Certificate Validation (CWE-295) in the Gallagher Milestone Integration Plugin (MIP)...7.2 High
- gfi software helpdeskHelpdesk7.7 High
- ubiquiti inc unifi protect camerasAn Improper Certificate Validation vulnerability could allow an authenticated malicious actor...6.4 Medium
- draytek vigor165 firmware, vigor166 firmware, vigor2133 firmware +17 more +19 moreDraytek devices Vigor 165/166 prior to v4.2.6 , Vigor 2620/LTE200 prior to v3.9.8.8, Vigor 2860...8.8 High
- adacore ada web server, debian linux +1 moreWhen AdaCore Ada Web Server 25.0.0 is linked with GnuTLS, the default behaviour of AWS.Client is...7.4 High
- sungrowpower isolarcloudSunGrow iSolarCloud Android app V2.1.6.20241104 and prior suffers from Missing SSL Certificate...7.4 High
- medixant radiant dicom viewerMedixant RadiAnt DICOM Viewer Improper Certificate Validation5.7 Medium
- ibm openpages with watsonIBM OpenPages improper certificate validation6.8 Medium
- dell bsafe ssl-jDell BSAFE SSL-J contains an Improper certificate verification vulnerability. A remote attacker...5.9 Medium
- microdicom dicom viewerMicroDicom DICOM Viewer Improper Certificate Validation5.7 Medium
- devolutions remote desktop manager, remote desktop manager powershell +1 moreMissing certificate validation in Devolutions Remote Desktop Manager on macOS, iOS, Android,...8.8 High
- devolutions remote desktop managerImproper host validation in the certificate validation component in Devolutions Remote Desktop...8.1 High
- 2n access commander2N Access Commander version 2.1 and prior is vulnerable in default settings to Man In The Middle...8.1 High
- veeam backup for aws, backup for google cloud, backup for microsoft azure +3 more +5 moreA vulnerability in Veeam Updater component allows Man-in-the-Middle attackers to execute...9.0 Critical
- mozilla firefox, thunderbird +1 moreCertificate length was not properly checked8.8 High
- free5gc udm, ubiquiti inc efg, ucg-max +9 more +11 moreAn Improper Certificate Validation on UniFi OS devices, with Identity Enterprise configured,...5.9 Medium
- pioneer dmh-wt7600nex, dmh-wt7600nex firmware +1 morePioneer DMH-WT7600NEX Telematics Improper Certificate Validation6.5 Medium
- chargepoint home flex, home flex hardwired firmware, home flex nema 14-50 plug firmware +1 more +3 moreChargePoint Home Flex Improper Certificate Validation6.5 Medium
- ibm cognos analytics mobile, cognos analytics +1 moreIBM Cognos Analytics Mobile information disclosure4.2 Medium
- ecovacs deebot t10, deebot t10 omni, deebot t10 plus +37 more +39 moreECOVACS lawnmowers and vacuums do not properly validate TLS certificates9.5 Critical
- ecovacs homeECOVACS HOME mobile app plugins do not properly validate TLS certificates9.5 Critical
- hcl software bigfix patch management download plug-insHCL BigFix Patch Download Plug-ins are affected by an insecure protocol support2.8 Low
tabby-sshnpmEugeny Tabby Sends Password Despite Host Key Verification Failure4.3 Medium- amazon workspaces clientIssue affecting Amazon WorkSpaces Clients (when running PCoIP protocol)7.7 High
- amazon dcv client, appstream 2.0 client, workspaces client +2 moreIssue affecting Amazon WorkSpaces (when running Amazon DCV protocol), Amazon AppStream 2.0, and Amazon DCV clients7.7 High
- cpplusworld cp-vnr-3104 firmwareAn issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to obtain the second RSA private...5.9 Medium
- cpplusworld cp-vnr-3104 firmwareImproper handling and storage of certificates in CP Plus CP-VNR-3104 B3223P22C02424 allow...7.4 High
- cpplusworld cp-vnr-3104 firmwareAn issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to access the Diffie-Hellman (DH)...5.9 Medium
- cpplusworld cp-vnr-3104 firmwareAn issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to obtain the EC private key and...5.9 Medium
- cisco thousandeyes endpoint agentCisco ThousandEyes Endpoint Agent Certificate Validation Vulnerability4.8 Medium
- ibm cognos controller, controller +1 moreIBM Cognos Controller improper certificate validation8.2 High
- mozilla firefox, thunderbird +1 moreAlt-Svc ALPN validation failure when redirected4.0 Medium
- tcpdf project tcpdfTCPDF missing certificate validation9.8 Critical
- ibm storage defender - resiliency service, storage defender resiliency service +1 moreIBM Storage Defender - Resiliency Service improper certificate validation5.9 Medium
- lenovo accessories and display managerAn improper certificate validation vulnerability was reported in LADM that could allow a network...8.1 High
- lenovo accessories and display manager, display control center +1 moreAn improper validation vulnerability was reported in the firmware update mechanism of LADM and...7.8 High
djoserDebiandjoser Authentication Bypass5.7 Medium- tenable security centerAn Improper Certificate Validation vulnerability exists in Tenable Security Center where an...2.7 Low
- altair-graphql altairAltair GraphQL Client's desktop app does not validate HTTPS certificates6.8 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero7.3 High
- canonical lxdlxd has a restricted TLS certificate privilege escalation when in PKI mode3.8 Low
- canonical lxdlxd CA certificate sign check bypass3.8 Low
- erlang otpssl fails to validate incorrect extened key usage5.5 Medium
- ubiquiti unifi ios app, ui unifi +1 moreAn Improper Certificate Validation on the UniFi iOS App managing a standalone UniFi Access Point ...7.1 High
- palo alto networks globalprotect app, paloaltonetworks globalprotect, palo alto networks globalprotect ios app +1 more +3 moreGlobalProtect App: Insufficient Certificate Validation Leads to Privilege Escalation6.0 Medium
org.keycloak:keycloak-coreMavenKeycloak mTLS Authentication Bypass via Reverse Proxy TLS Termination7.1 High- Show moreLoading…