CWE-297: Improper Validation of Certificate with Host Mismatch
The product communicates with a host that provides a certificate, but the product does not properly ensure that the certificate is actually associated with that host.
A kind of CWE-923 Improper Restriction of Communication Channel to Intended Endpoints.
From the CWE List. © The MITRE Corporation.
Newest
- shibboleth identity provider, opensaml java, shibboleth; opensaml java identity provider (idp) +2 moreImproper Validation of Certificate with Host Mismatch in Shibboleth Identity Provider and OpenSAML Java5.9 Medium
- [unknown] postgresql, postgresql jdbc driver, redhat enterprise linux +2 moreModerate severity vulnerability that affects org.postgresql:pgjdbc-aggregate8.1 High
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable vulnerability exists in the filtering functionality of Circle with Disney. SSL...8.1 High
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable vulnerability exists in the remote control functionality of Circle with Disney...7.4 High
- circle media circle, meetcircle circle with disney firmware +1 moreAn exploitable vulnerability exists in the remote control functionality of Circle with Disney...9.0 Critical
- juniper junosPKId in Juniper Junos OS before 12.1X44-D52, 12.1X46 before 12.1X46-D37, 12.1X47 before 12.1X47...6.5 Medium
- not yet commons ssl project yet commons sslImproper Validation of Certificate with Host Mismatch in Not Yet Commons SSL6.8 Medium
- apache axisImproper Validation of Certificates in apache axis5.8 Medium
- apache subversion, apple xcode, canonical ubuntu linux +1 more +3 moreThe Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18 and 1.8.x before 1.8.10...4.0 Medium