Skip to content
OpenAdvisories

Weakness (CWE)

CWE-295: Improper Certificate Validation

Base Draft

The product does not validate, or incorrectly validates, a certificate.

How to prevent it (2 mitigations)

  1. Architecture and Design, Implementation

    Certificates should be carefully managed and checked to assure that data are encrypted with the intended owner's public key.

  2. Implementation

    If certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the hostname.

Source: MITRE CWE-295

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.