CWE-297: Improper Validation of Certificate with Host Mismatch
The product communicates with a host that provides a certificate, but the product does not properly ensure that the certificate is actually associated with that host.
A kind of CWE-923 Improper Restriction of Communication Channel to Intended Endpoints.
From the CWE List. © The MITRE Corporation.
Newest
- jetbrains intellij idea In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS... 7.4 High
- wazuh Wazuh 3.9.0 before 4.14.9 Missing TLS Hostname Verification in fluent-forward Module 8.2 High
- jopenlibs vault-java-driver vault-java-driver: SslConfig silently disables requested TLS verification 7.4 High
- sumatrapdfreader sumatrapdf SumatraPDF: TLS hostname validation disabled in `HttpGet()` 8.2 High
- deadtrickster ssl verify fun ssl_verify_fun: partial-label wildcard certificate matches hostnames across a label boundary 9.1 Critical
- apache software foundation brpc Apache bRPC: TLS Client Accepts Certificates for Mismatched Peer Names 5.9 Medium
- curl redirect to SFTP or SCP bypasses host verification 8.1 High
- progress software corporation marklogic server Improper TLS hostname verification in Progress MarkLogic Server 7.4 High
- devolutions server MariaDB Connector/C: libmariadb allowed cleartext password leakage on TLS hostname verification failure 5.9 Medium
- apache cxf Apache CXF: The Netty HTTP client transport does not perform TLS hostname verification. 9.1 Critical
- ffmpeg FFmpeg before 8.1.3 and 9.x before 9.0.2 mbedTLS Hostname Verification Bypass for IP Hosts 6.3 Medium
-
gnutlsAzure Linux,gnutls26Ubuntu,gnutls28Debian +1 more +3 more A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name... 6.5 Medium -
github.com/xtls/xray-coreGo Xray-core: Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks 7.6 High - apache software foundation thrift Apache Thrift, Apache Thrift: The C++ and D clients fall back to the certificate Common Name when subjectAltName entries are present but do not match 6.9 Medium
- joyland joyland.ai Joyland AI hostname checking disabled 6.9 Medium
- python software foundation cpython SSLContext.wrap_bio() missing validation of server_hostname parameter 7.6 High
- php TLS Hostname Verification Falls Back to CN After SAN Mismatch 4.3 Medium
- warp-tech warpgate Warpgate: Web SSH stores a jump host's key against the target's address, so it validates as the target 5.7 Medium
- agronholm anyio AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing 9.3 Critical
- teluu pjsip, pjsip pjproject +1 more PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends) 7.4 High
- aws awsiotpythonsdk Improper validation of certificate with host mismatch in AWS IoT Device SDK for Python 9.2 Critical
- apache zookeeper Apache ZooKeeper: Improper validation of certificate with host mismatch in FIPS mode 7.5 High
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 more Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior... 7.0 High
- eclipse foundation ditto In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto... 9.2 Critical
- fortinet fortios, fortiproxy, siemens ruggedcom ape1808 +2 more A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1... 7.3 High
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 more Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior... 4.8 Medium
- ibm netezza software, netezza performance server +1 more Vulnerabilities exists in IBM Netezza Software 5.3 Medium
- spring amqp, vmware spring advanced message queuing protocol +1 more Log4j2 AmqpAppender disables TLS hostname verification by default 6.8 Medium
- netty Netty 4.2.0 through 4.2.16 TLS Hostname Verification Bypass 8.7 High
- apache ranger Apache Ranger: Clients accept TLS certificates issued for other hostnames 7.5 High
- ibm business automation workflow containers and traditional, business automation workflow +1 more Improper Validation of Certificate with Host Mismatch in IBM Business Automation Workflow containers 3.8 Low
- bouncycastle bctls-fips, bouncy castle for java lts, legion of the bouncy castle inc. bc-fja +2 more +4 more JSSE hostname verifier CN-fallback enabled by default despite documented opt-in 9.3 Critical
- nodejs node An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname... 6.3 Medium
- apache thrift Apache Thrift: Python TSSLSocket Hostname Matcher Import 5.9 Medium
- apache thrift Apache Thrift: C++ TSSLSocket matchName() RFC 6125 Wildcard Bypass 8.2 High
- apache thrift Apache Thrift: c_glib TLS Client Missing Hostname Verification 9.1 Critical
- apereo jasig cas client, java apereo cas client +1 more Improper Validation of Certificate in CAS Client 7.4 High
- libgit2 libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Backend 6.5 Medium
- snowflake connector for python Improper TLS Hostname Verification in Snowflake Connector for Python 9.2 Critical
- benoitc erlang quic QUIC has Broken TLS verification 9.1 Critical
- curl SSH improper host validation 7.4 High
- curl proto-default skips SSH verification 7.5 High
- devolutions remote desktop manager Improper host validation in the social login autofill feature in Devolutions Remote Desktop... 5.5 Medium
- aio-libs aiohttp AIOHTTP: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections 2.7 Low
- red hat openshift container platform 4, openstack platform 16.2, openstack platform 17.1 +1 more +3 more OpenStack oslo.messaging does not verify RabbitMQ broker hostname during TLS handshake 7.4 High
- apache directory ldap api Apache Directory LDAP API: LDAP client implementation does not verify if the server certificate matches the intended LDAP hostname 8.8 High
- erlang otp, erlang\/otp, red hat hardened images +3 more +5 more nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification 7.6 High
- anthropic claude desktop, anthropics claude-code +1 more Claude Desktop: SSH Host Key Verification Bypass Allows Man-in-the-Middle Attack on Remote Sessions 7.4 High
- apache thrift, red hat cryostat 4 on rhel 9, multicluster global hub +24 more +26 more Apache Thrift: TSSLTransportFactory.java hostname verification 7.3 High
- spring security, vmware spring security, red hat openshift developer tools and services +11 more +13 more Unauthorized User Impersonation when Using X.509 Client Certificates 6.8 Medium
- Show olderLoading…