CWE-295: Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.
A kind of CWE-287 Improper Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- netgear rax30, rax30 firmware, raxe300 +1 more +3 moreImproper certificate validation in firmware update logic in NETGEAR RAX30 and RAXE3005.2 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2025.3.104432 missing TLS certificate validation enabled data...8.1 High
- kubevirtKubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer4.7 Medium
- tonec internet download managerTonec Internet Download Manager 6.42.41.1 and earlier suffers from Missing SSL Certificate...9.1 Critical
- suse neuvectorNeuVector telemetry sender is vulnerable to MITM and DoS8.6 High
org.opensearch.dataprepper.plugins:geoip-processorMavenGeoIP processor disables SSL certificate validation when downloading databases5.9 Mediumorg.opensearch.dataprepper.plugins:geoip-processorMavenOpenSearch Data Prepper uses deprecated SSL protocol identifier4.8 Medium- devolutions serverImproper certificate validation when connecting to gateways in Devolutions Server 2025.3.2 and...8.8 High
- in-toto go-witnessgo-witness Improper Verification of AWS EC2 Identity Documents6.9 Medium
- amazon opensearch data prepper, opensearch-project data-prepper +1 moreOpenSearch Data Prepper plugins trusts all SSL certificates by default7.4 High
- lenovo lecloud clientA vulnerability was reported in the Lenovo LeCloud client application that, under certain...6.0 Medium
- lenovo universal device clientAn improper certificate validation vulnerability was reported in the Lenovo Universal Device...2.3 Low
- mongodb rust driverConfiguration may unexpectedly disable certificate validation8.0 High
- tomofun furbo 360, furbo mini, furbo 360 dog camera firmware +1 more +3 moreTomofun Furbo 360/Furbo Mini HTTP Traffic collect_logs.sh upload_file_to_s3 certificate validation6.3 Medium
- go standard library crypto/x509, golang go +1 morePanic when validating certificates with DSA public keys in crypto/x5097.5 High
- akkadotnet akka.netAkka.Remote TLS did not properly implement certificate-based authentication9.3 Critical
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Weak SSL/TLS Certificate Validation RCE9.5 Critical
- clevercontrol employee monitoring softwareMissing Certificate Validation in CleverControl Installer Allows Remote Code Execution6.5 Medium
- microworld technologies escan avMicroWorld eScan AV Insecure Update Mechanism Allows Man-in-the-Middle Replacement of Updates9.3 Critical
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Insecure SSL Verification Allows Man-in-the-Middle Attacks9.3 Critical
- dragonflyoss dragonflyManager generates mTLS certificates for arbitrary IP addresses7.7 High
- dragonflyoss dragonflyDragonfly Manager makes requests to external endpoints with disabled TLS authentication2.7 Low
- cisa thoriumCISA Thorium does not validate TLS connections to Elasticsearch2.3 Low
- kubernetes csharp clientKubernetes C# Client: improper certificate validation in custom CA mode may lead to man-in-the-middle attacks6.8 Medium
- bmc control-m/agent, control-m\/agent +1 moreBMC Control-M/Agent default SSL/TLS configuration authenticated bypass9.5 Critical
- avtech eagleeyes\(lite\)An issue was discovered in the method push.lite.avtech.com.MySSLSocketFactoryNew...8.8 High
- wireless tsukamoto co., ltd. wtw-eagle app for android, wtw-eagle app for ios +1 moreWTW-EAGLE App does not properly validate server certificates, which may allow a man-in-the-middle...6.3 Medium
- papercut print deployMisconfigured certificate validation with self-signed certificates for Print Deploy7.7 High
- ibm concert, concert software +1 moreIBM Concert Software information disclosure5.9 Medium
- qnap qsync centralQsync Central8.3 High
- qnap qsync centralQsync Central8.3 High
- tomtretbar dell powerscaleLack of TLS validation in plugin Dell Powerscale on Checkmk Exchange6.9 Medium
- tomtretbar vmware vsanLack of TLS validation in plugin VMware vSAN on Checkmk Exchange6.9 Medium
- pawelko freebox v6 agentLack of TLS validation in plugin Freebox v6 agent on Checkmk Exchange6.9 Medium
- heinlein-support check mk python apiLack of TLS validation in plugin check-mk-api on Checkmk Exchange6.9 Medium
- oetiker bgp monitoringLack of TLS validation in plugin BGP Monitoring on Checkmk Exchange6.9 Medium
- softing edgeaggregator, edgeconnector, opc ua c++ sdk +2 moreBypass the client certificate trust check of an opc.https server while only secure communication is allowed9.1 Critical
- ibm websphere application serverIBM WebSphere Application Server information disclosure5.3 Medium
- netskope clientNetskope Client Local Elevation of Privileges6.0 Medium
- palo alto networks globalprotect app, global protect uwp app +1 moreGlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation5.3 Medium
- f5 accessF5 Access for Android vulnerability8.8 High
- dreame technology dreamehome android app, dreamehome ios app, movahome ios app +2 moreDreame Technology iOS and Android Mobile Applications Improper Certificate Validation8.5 High
- cisco webex meetingsCisco Webex Meeting Client Join Certificate Validation Vulnerability5.4 Medium
- eaton g4 pduThe server identity check mechanism for firmware upgrade performed via command shell is...5.7 Medium
- checkpoint check point management log server, log server +1 moreLack of TLS validation6.5 Medium
- huawei harmonyosAuthentication management vulnerability in the ArkWeb module. Impact: Successful exploitation of...7.7 High
- bluestacksA lack of SSL certificate validation in BlueStacks v5.20 allows attackers to execute a man-it-the...3.9 Low
- 1panel-dev 1panel1Panel Agent Bypasses Certificate Verification Leading to Arbitrary Command Execution8.1 High
- hashicorp vault, vault enterprise +1 moreVault Certificate Auth Method Did Not Validate Common Name For Non-CA Certificates6.8 Medium
- alpine ilx-507, alpsalpine ilx-507 firmware +1 moreAlpine iLX-507 TIDAL Improper Certificate Validation Vulnerability7.1 High
- Show moreLoading…