CWE-295: Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.
A kind of CWE-287 Improper Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- benoitc hackneyCustom cacerts or cacertfile do not restrict trust to the pinned CA in hackney9.1 Critical
- unitree robotics go2, unitreerobotics unitree go2 +1 moreUnitree Robotics Unitree Go2 chat_go websocket.py WebSocketClient.connect certificate validation6.3 Medium
- hcl software bigfix platformHCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID)6.8 Medium
- hcl software compassMongoDB Compass trusts certificates issued by recoverable eMudhra intermediate CAs7.6 High
- agentjido req llmWebSocket sessions do not verify TLS certificates, exposing API keys and OAuth tokens to on-path attackers9.1 Critical
- nodejs nodeA flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to...6.7 Medium
- nodejs nodeA flaw in Node.js TLS hostname verification can cause a server certificate to be validated...7.4 High
- nodejs nodeA flaw in Node.js TLS hostname verification allows a certificate without a matching IP address...7.4 High
- schorschii oco-serverOCO-Server: MDM /profile endpoint accepts self-signed PKCS#7 signatures (PKCS7_NOVERIFY): device MDM identity (certificate + private key) disclosure and device-record hijack9.1 Critical
- openvpn 3 core libraryImproper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows...6.3 Medium
- newtype infortech nt oneappNewType Infortech｜NT OneAPP - Improper Certificate Validation9.3 Critical
- traefikTraefik before 2.11.58 and 3.7.14 TLS Config Bypass via NTLM/Kerberos Round Tripper7.0 High
- red hat agentic cluster security suite 0.2, cost management 4, advanced cluster security for kubernetes 4.11 +55 more +57 moreCa-certificates: distrust emudhra intermediate ca certificates due to security concerns6.8 Medium
- apache software foundation traffic serverApache Traffic Server: TLS session ticket resumption bypasses per-SNI verify_client STRICT enforcement7.8 High
- apache software foundation traffic serverApache Traffic Server: Default server_session_sharing.match omits MASK_CERT, allowing pooled mTLS identity confusion at the origin7.8 High
- freerdpFreeRDP 2.0.0 before 3.32.0 Proxy Improper TLS Certificate Validation7.6 High
- oracle corporation graalvm enterprise edition, graalvm for jdk, java se +2 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...3.7 Low
libmozilla-ca-perlDebian,perl-mozilla-caAlpaquita +1 moreMozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates9.1 Critical- google chromeUse after free in Network in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote...8.8 High
uvPyPIuv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised9.1 CriticalcertifiPyPIcertifi bundles emSign root CAs with compromised intermediate CA keys9.1 Critical- mozilla firefox, thunderbird +1 moreCryptographic issue in the Security Block-lists, Allow-lists, and other State component5.4 Medium
- ibm concertIBM Concert Software Improper Certificate Validation3.7 Low
- tufayellus tiktok-video-downloader-phpTufayelLUS TikTok-Video-Downloader-PHP TLS index.php certificate validation6.3 Medium
- apache camelApache Camel: Camel-Knative Improper Certificate Validation When SSL Is Enabled Without a Truststore5.9 Medium
- glitterware passyGlitterWare Passy TLS main.dart MyHttpOverrides certificate validation6.3 Medium
- f3-factory fatfree-coref3-factory fatfree-core HTTP Client web.php _curl certificate validation6.3 Medium
- diem-project diemdiem-project diem Google Analytics Client gapi.class.php certificate validation6.3 Medium
- opentelemetry opentelemetry-exporter-otlp-proto-httpOpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 Improper Certificate Validation8.3 High
- lenovo smart camera c33, smart camera c33 pro, smart camera c35 +9 more +11 moreA potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33...5.9 Medium
- nodejs undiciundici vulnerable to TLS certificate validation bypass via dropped tls options in Agent7.4 High
- cato networks client for android, client for ios, client for linux +2 more +4 moreImproper certificate validation in Cato Client tunnel handshake6.0 Medium
- eclipse foundation vert.xIn Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP client relies on an SSL context for efficiency purpose, the key of this cache should reflect entirely the…9.1 Critical
- erlang otpTLS 1.2 session resumption in ssl crosses SNI virtual-host client-certificate trust boundaries6.3 Medium
- dell terraform provider for redfishDell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate...9.0 Critical
- curlwolfSSL public-key pinning bypass9.1 Critical
- curlknownhost callback mismatches key as missing7.4 High
- adobe c2pa, c2pa tool, c2pa-web +3 more +5 moreCAI Content Credentials | Improper Certificate Validation (CWE-295)5.9 Medium
- adobe c2pa, c2pa tool, c2pa-web +3 more +5 moreCAI Content Credentials | Improper Certificate Validation (CWE-295)5.9 Medium
- adobe c2pa, c2pa tool, c2pa-web +3 more +5 moreCAI Content Credentials | Improper Certificate Validation (CWE-295)7.5 High
- adobe c2pa, c2pa tool, c2pa-web +3 more +5 moreCAI Content Credentials | Improper Certificate Validation (CWE-295)7.5 High
- adobe c2pa, c2pa tool, c2pa-web +3 more +5 moreCAI Content Credentials | Improper Certificate Validation (CWE-295)7.5 High
- adobe c2pa, c2pa tool, c2pa-web +3 more +5 moreCAI Content Credentials | Improper Certificate Validation (CWE-295)7.5 High
- ibm websphere application server - libertyIBM WebSphere Application Server Liberty Improper Certificate Validation6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +17 more +19 moreActive Directory Federation Services (AD FS) Spoofing Vulnerability7.5 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Hello Security Feature Bypass Vulnerability4.4 Medium
- zoom communications clientsImproper certificate validation in the My Notes feature of certain Zoom Clients may allow an...7.4 High
- zoom communications clientsImproper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated...7.4 High
- siemens industrial edge app publisherA vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9)....7.6 High
- microsoft .net, .net framework, .net framework 3.5 +26 more +28 moreActive Directory Federation Services (AD FS) Spoofing Vulnerability7.4 High
- Show moreLoading…