CWE-299: Improper Check for Certificate Revocation
The product does not check or incorrectly checks the revocation status of a certificate.
A kind of CWE-295 Improper Certificate Validation.
From the CWE List. © The MITRE Corporation.
Newest
- jetbrains clion, datagrip, dataspell +8 more +10 more In JetBrains IntelliJ IDEA, PyCharm, PhpStorm, RubyMine and WebStorm before 2026.3, 2026.2.4,... 8.0 High
- python software foundation cpython Distrust compromised intermediate certificates in ssl module 9.4 Critical
- electron Electron: Mitigation for compromised eMudhra intermediate certificates 7.4 High
- go standard library crypto/x509 Distrust compromised intermediate certificates in crypto/x509 6.8 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 more Secure Boot Security Feature Bypass Vulnerability 4.4 Medium
- wolfssl CRL check skipped when OCSP enabled and certificate has no OCSP URL 2.3 Low
- apache software foundation tomcat Apache Tomcat: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore 6.5 Medium
- red hat build of apache camel for spring boot 4 Io.netty/netty-handler-ssl-ocsp: netty: ocsp validation silently skipped when a response omits the optional nextupdate field 5.9 Medium
- microsoft jsch mwiede jsch KnownHosts.java getRevokedKeys improper check for certificate revocation 6.3 Medium
- forgekeep nebula-mesh nebula-mesh: Certificate revocation is never enforced at the mesh 8.1 High
- rockwell automation controllogix® 5580, compactlogix® 5380, guardlogix® 5580, compact guardlogix® 5380, 1756-en4tr Rockwell Automation CompactLogix® 5380 ControlLogix® 5580 / 1756-EN4 Communications Module – Certificate Revocation List Vulnerability 8.2 High
-
app-store-server-libraryPyPI Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks 6.9 Medium - systerel s2opc Improper Check for Certificate Revocation in S2OPC 5.6 Medium
-
sequoia-gitcrates.io sequoia-git has broken hard revocation handling 1.8 Low - rustls webpki rustls-webpki before 0.103.10 CRL Revocation Check Bypass 5.9 Medium
- aws aws-lc, aws-lc-fips +1 more CRL Distribution Point Scope Check Logic Error in AWS-LC 9.1 Critical
- thegreenbow vpn client windows enterprise Incorrect validation of OCSP certificates in TheGreenBow VPN Client Windows Enterprise 8.2 High
- ibm cognos analytics mobile IBM Cognos Analytics Mobile (iOS) authentication bypass 5.2 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 more MongoDB Server running on Linux may allow unexpected connections where intermediate certificates are revoked 8.1 High
- notaryproject notation-go Timestamp signature generation lacks certificate revocation check in notion-go 4.0 Medium
- netty Netty: Out-of-date OCSP Responses Accepted by OcspServerCertificateValidator 7.4 High
- dell cloud mobility for dell emc storage, cloud mobility for dell storage +1 more Cloud Mobility for Dell EMC Storage, versions 1.3.0.X and below contains an Improper Check for... 7.0 High
- juniper mist cloud ui Juniper Networks Mist Cloud UI: SAML authentication certificate vulnerability. 8.3 High
- philips intellivue patient monitors, intellivue x3, patient information center ix (picix) +13 more +15 more Philips Patient Monitoring Devices Improper Check for Certificate Revocation 6.4 Medium