CWE-295: Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.
A kind of CWE-287 Improper Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeImproper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote...7.5 High
- google chromeImproper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a...5.4 Medium
- google chromeImproper certificate validation in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote...4.3 Medium
- eclipse foundation dittoIn Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto...9.2 Critical
- red hat build of apache camel - hawtio 4Hawtio-operator: hawtio-operator: service-ca signing oracle allows arbitrary-cn certificate issuance to namespace edit users9.9 Critical
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...7.6 High
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...5.9 Medium
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...5.5 Medium
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...5.6 Medium
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...7.3 High
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...7.4 High
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...5.9 Medium
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...7.4 High
- bilibili desktopBilibili Desktop through 1.18.0 Remote Code Execution via TLS Verification Bypass8.6 High
@simplewebauthn/servernpmSimpleWebAuthn: Registration verification does not sufficiently ensure that attestation certificates chain to a trust anchor2.0 Low- nodejs undiciundici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool7.4 High
- checkmk gmbh checkmkAgent receiver certificate confusion allows authentication with a certificate issued for another endpoint5.3 Medium
- snowflake connector for python, go driver, jdbc driver +3 more +5 moreImproper OCSP response validation in Snowflake drivers7.4 High
- ibm netezza software, netezza performance server +1 moreVulnerabilities exists in IBM Netezza Software5.9 Medium
- eclipse foundation aeriosIn the current development version of Eclipse aeriOS, for which no official release has yet been...8.3 High
- mispMISP CurlClient TLS Peer Verification Disabled by Default Enables Man-in-the-Middle Attacks7.6 High
- eclipse foundation arrowheadIn Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the...9.5 Critical
- eclipse foundation aeriosIn the current development version of Eclipse aeriOS, which has not yet had an official release,...9.0 Critical
- curlOpenSSL pinning bypass7.5 High
- curlwolfSSL CA-cache hit overrides callback7.5 High
- mediatek mt2716 firmware, mt6835 firmware, mt6858 firmware +20 more +22 moreIn Modem, there is a possible system crash due to improper input validation. This could lead to...5.0 Medium
- cloud foundry bosh-vsphere-cpi-releaseBOSH vSphere CPI Improper Cert Validation7.7 High
- ibm concertMultiple Vulnerabilities in IBM Concert Software5.9 Medium
- ibm integrated analytics systemIBM Integrated Analytics System (IIAS) is affected by improper SSL/TLS certificate validation vulnerability in JWT service component5.9 Medium
- mongodb bi connectorBI Connector Optional Client Certificate Verification Allows Unauthenticated Connections8.7 High
- mariadb-corporation mariadb-connector-nodejsMariaDB Connector/Node.js: Connector leaks the cleartext password to an MitM despite `ssl: true`7.5 High
- applied systems engineering ase2000 v2Improper Certificate Validation in ASE 20009.1 Critical
- dell powerprotect oneDell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Certificate Validation...5.9 Medium
- gravitl netmakerNetmaker through 1.6.0 Improper Certificate Validation in SMTP Client8.3 High
- siemens kaskas: Persistent SSH Host Key Checking Disablement3.3 Low
- nvidia nemoclawNVIDIA NemoClaw for Linux contains a vulnerability in its deployment process, where an attacker...8.1 High
- cvhub520 x-anylabelingX-AnyLabeling before 4.0.0-beta.9 Improper Certificate Validation in Model Downloads8.2 High
- red hat certificate system 10, certificate system 11, enterprise linux 10 +4 more +6 moreJss: jss: jsstrustmanager does not verify nss trust flags on ca certificates6.5 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS7.7 High
- automattic mongooseMongoose: TLS Hostname Verification Bypass via Overly Permissive Wildcard Matching9.1 Critical
- automattic mongooseMongoose Built-in TLS: CA-bundle certificate chain accepted without any signature verification9.3 Critical
- splunk connect for kafkaImproper Certificate Validation through HTTP Event Collector Kerberos Authentication in Splunk Connect for Kafka7.4 High
- splunk soarImproper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOAR7.4 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS9.3 Critical
- ibm power systems firmware, power system e1080 \(9080-hex\) firmware, power system e1180 \(9080-heu\) firmware +7 more +9 morePower System Improper Certificate Validation9.6 Critical
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS8.1 High
- fbeta-gmbh epa3-service-opensourceePA 3.x Integration: TLS Certificate Verification Universally Disabled7.5 High
- fbeta-gmbh epa3-service-opensourceePA 3.x Integration: VAU Server Authentication Bypass via Circular Certificate Trust9.1 Critical
- rabbitmq rabbitmq-java-clientRabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol() enables MITM5.1 Medium
- mastodonMastodon: Unwanted deactivation of SSL/TLS certificate verification7.4 High
- Show moreLoading…