CWE-298: Improper Validation of Certificate Expiration
A certificate expiration is not validated or is incorrectly validated.
A kind of CWE-295 Improper Certificate Validation.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft jsch mwiede jsch KnownHosts.java getRevokedKeys improper check for certificate revocation 6.3 Medium
- wso2 api manager, identity server, identity server as key manager +2 more +4 more Role Overwriting via Silent JIT Provisioning in Multiple WSO2 Products Enables Privilege Escalation 4.8 Medium
- casdoor CVE-2026-9097 9.8 Critical
- eclipse cyclone data distribution service Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows... 10.0 Critical
- eprosima fast dds eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation,... 10.0 Critical
- johnson controls istarex, istar edge, istar ultra lt, istar ultra , istar ultra se iSTAR- Improper Validation of Certificate Expiration 7.1 High
- opsmill infrahub Infrahub allows authentication with deleted and expired API tokens 5.5 Medium
- arcinfo pcvue Certificate validity not properly verified 6.0 Medium
- pow-auth pow Pow Mnesia cache doesn't invalidate all expired keys on startup 6.5 Medium
- flyte flyteadmin Insufficient AccessToken Expiration Check in FlyteAdmin 6.5 Medium