Weakness (CWE)

CWE-295: Improper Certificate Validation

Base Draft

The product does not validate, or incorrectly validates, a certificate.

How to prevent it (2 mitigations)

Architecture and Design, Implementation

Certificates should be carefully managed and checked to assure that data are encrypted with the intended owner's public key.
Implementation

If certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the hostname.

Source: MITRE CWE-295

All Critical High Medium Low Exploited only Public exploit

481 results · Clear filters · Feed

Medium 5.3

CVE-2017-18588

Improper Certificate Validation in security-framework

An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates.

security-framework crates.io

Aug 26, 2019
Medium 5.9

CVE-2019-1948

Cisco Webex Meetings Mobile (iOS) SSL Certificate Validation Vulnerability

A vulnerability in Cisco Webex Meetings Mobile (iOS) could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data by using an invalid Secure Sockets Layer (SSL) certificate. The vulnerability is due to insufficient SSL ce…

Cisco Cisco WebEx Meetings for iOS iOS Network devices

Aug 21, 2019
Medium 6.5

CVE-2019-10381

Jenkins Codefresh Integration Plugin Improper Certificate Validation vulnerability

Jenkins Codefresh Integration Plugin 1.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM.

Jenkins Project Jenkins Codefresh Integration Plugin org.jenkins-ci.plugins:codefresh Web / CMS Maven

Aug 7, 2019
Medium 6.5

CVE-2019-10382

Jenkins VMware Lab Manager Slaves Plugin vulnerable to Improper Certificate Validation

Jenkins VMware Lab Manager Slaves Plugin 0.2.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM.

Jenkins Project Jenkins VMware Lab Manager Slaves Plugin org.jenkins-ci.plugins:labmanager Web / CMS Maven

Aug 7, 2019
Medium 5.9

CVE-2019-1010206

kevinsawicki/http-request Missing certificate validation

OSS Http Request (Apache Cordova Plugin) 6 is affected by: Missing SSL certificate validation. The impact is: certificate spoofing. The component is: use this library when https communication. The attack vector is: certificate spoofing.

OSS Http Request (Apache Cordova Plugin) com.github.kevinsawicki:http-request Maven

Jul 23, 2019
Medium 6.5

CVE-2019-3875

Improper Certificate Validation and Insufficient Verification of Data Authenticity in Keycloak

A vulnerability was found in keycloak before 6.0.2. The X.509 authenticator supports the verification of client certificates through the CRL, where the CRL list can be obtained from the URL provided in the certificate itself (CDP) or through the separately co…

Red Hat keycloak org.keycloak:keycloak-core Maven

Jun 12, 2019
Medium 6.5

CVE-2019-10334

Jenkins ElectricFlow Plugin globally and unconditionally disabled SSL/TLS certificate validation

Jenkins ElectricFlow Plugin 1.1.5 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM when MultipartUtility.java is used to upload files.

Jenkins Project Jenkins ElectricFlow Plugin org.jenkins-ci.plugins:electricflow Web / CMS Maven

Jun 11, 2019
Medium 6.5

CVE-2019-10317

Jenkins SiteMonitor Plugin globally and unconditionally disables SSL/TLS certificate validation

Jenkins SiteMonitor Plugin 0.5 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM.

Jenkins Project Jenkins SiteMonitor Plugin org.jvnet.hudson.plugins:sitemonitor Web / CMS Maven

Apr 30, 2019
Medium 6.5

CVE-2019-10314

Jenkins Koji Plugin globally and unconditionally disables SSL/TLS certificate validation

Jenkins Koji Plugin disables SSL/TLS and hostname verification globally for the Jenkins master JVM.

Jenkins Project Jenkins Koji Plugin org.jenkins-ci.plugins:koji Web / CMS Maven

Apr 30, 2019
Medium 6.5

CVE-2019-1683

Cisco SPA112, SPA525, and SPA5x5 Series IP Phones Certificate Validation Vulnerability

A vulnerability in the certificate handling component of the Cisco SPA112, SPA525, and SPA5X5 Series IP Phones could allow an unauthenticated, remote attacker to listen to or control some aspects of a Transport Level Security (TLS)-encrypted Session Initiatio…

Cisco Cisco Small Business SPA500 Series IP Phones Cisco Small Business SPA112 Series IP Phones Cisco Small Business SPA5X5 Series IP Phones Network devices

Feb 25, 2019
Medium 5.3

CVE-2018-12087

Moderate severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua

Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network infrastructure to decrypt passwords.

OPCFoundation.NetStandard.Opc.Ua NuGet

Oct 3, 2018
Medium 5.9

CVE-2018-11087

TLS validation error

Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit.

Pivotal Spring AMQP com.rabbitmq:amqp-client org.springframework.amqp:spring-amqp Maven

Sep 14, 2018
Medium 5.4

CVE-2017-7513

It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 ser…

Red Hat Red Hat Satellite

Aug 22, 2018
Medium 5.4

CVE-2018-10894

Keycloak Authentication Error

It was found that SAML authentication in Keycloak 3.4.3.Final incorrectly authenticated expired certificates. A malicious user could use this to access unauthorized data or possibly conduct further attacks.

Red Hat keycloak org.keycloak:keycloak-services org.keycloak:keycloak-saml-adapter-core Maven

Aug 1, 2018
Medium 6.8

CVE-2017-2648

Jenkins SSH Build Agents Plugin did not verify host keys

It was found that jenkins-ssh-slaves-plugin before version 1.15 did not perform host key verification, thereby enabling Man-in-the-Middle attacks.

Jenkins Project jenkins-ssh-slaves-plugin org.jenkins-ci.plugins:ssh-slaves Web / CMS Maven

Jul 27, 2018
Medium 4.3

CVE-2017-2629

curl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks for a fresh proof of the…

curl curl curl curl Debian Alpine

Jul 27, 2018
Medium 5.3

CVE-2017-2623

It was discovered that rpm-ostree and rpm-ostree-client before 2017.3 fail to properly check GPG signatures on packages…

Project Atomic rpm-ostree,

Jul 27, 2018
Medium 6.5

CVE-2017-2639

It was found that CloudForms does not verify that the server hostname matches the domain name in the certificate when u…

[UNKNOWN] CloudForms

Jul 27, 2018
Medium 6.5

CVE-2017-7562

An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of cl…

MIT krb5

Jul 26, 2018
Medium 4.8

CVE-2017-7468

In curl and libcurl 7.52.0 to and including 7.53.1, libcurl would attempt to resume a TLS session even if the client ce…

[UNKNOWN] curl curl curl Debian Alpine

Jul 16, 2018
Medium 5.5

CVE-2018-8356

Improper Certificate Validation in Microsoft .NET Framework components

A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 3.0, Micros…

Microsoft ASP.NET Core .NET Core Microsoft .NET Framework NuGet

Jul 11, 2018
Medium 6.5

CVE-2018-1000605

Jenkins CollabNet Plugin man in the middle vulnerability

A man in the middle vulnerability exists in Jenkins CollabNet Plugin 2.0.4 and earlier in CollabNetApp.java, CollabNetPlugin.java, CNFormFieldValidator.java that allows attackers to impersonate any service that Jenkins connects to.

org.jenkins-ci.plugins:collabnet Maven

Jun 26, 2018
Medium 6.5

CVE-2018-1000500

Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arb…

busybox busybox busybox Debian Ubuntu Alpine

Jun 26, 2018
Medium 5.6

CVE-2018-1000151

Jenkins vSphere Plugin disables SSL/TLS certificate validation by default

A man in the middle vulnerability exists in Jenkins vSphere Plugin 2.16 and older in VSphere.java that disables SSL/TLS certificate validation by default.

org.jenkins-ci.plugins:vsphere-cloud Maven

Apr 5, 2018
Medium 5.9

CVE-2017-1000396

Improper Certificate Validation in Jenkins

Jenkins 2.73.1 and earlier, 2.83 and earlier bundled a version of the commons-httpclient library with the vulnerability CVE-2012-6153 that incorrectly verified SSL certificates, making it susceptible to man-in-the-middle attacks. This library is widely used a…

org.jenkins-ci.main:jenkins-core Maven

Jan 26, 2018
Medium 5.9

CVE-2014-3607

Improper Certificate Validation in vt-ldap

DefaultHostnameVerifier in Ldaptive (formerly vt-ldap) does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via …

edu.internet2.middleware:shibboleth-identityprovider libvt-ldap-java edu.vt.middleware:vt-ldap Debian Maven

Jan 8, 2018
Medium 5.9

CVE-2017-17718

net-ldap Improper Certificate Validation vulnerability

The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation.

net-ldap ruby-net-ldap Debian RubyGems

Dec 17, 2017
Medium 5.9

CVE-2017-1000209

nv-websocket-client allows attackers to spoof SSL/TLS servers via an arbitrary valid certificate

The Java WebSocket client nv-websocket-client does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL/TLS servers …

com.neovisionaries:nv-websocket-client Maven

Nov 17, 2017
Medium 5.3

CVE-2017-13083

Akeo Consulting Rufus prior to version 2.17.1187 does not adequately validate the integrity of updates downloaded over …

Akeo Consulting Rufus

Oct 18, 2017
Medium 5.9

CVE-2015-2674

Restkit Does Not Validate TLS certificates

Restkit allows man-in-the-middle attackers to spoof TLS servers by leveraging use of the ssl.wrap_socket function in Python with the default CERT_NONE value for the cert_reqs argument.

python-restkit restkit Ubuntu PyPI

Aug 9, 2017
Medium —

CVE-2017-0248 Public exploit

Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core

Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security Usage taggings when they present a certificate that is invalid for a specific use, aka ".NET Security Feature Bypass Vulnerability."

Microsoft Microsoft .NET Framework Microsoft.AspNetCore.Mvc.Core System.Text.Encodings.Web NuGet

May 12, 2017
Medium 5.9

CVE-2016-5016

Cloud Foundry vulnerable to Improper Certificate Validation

Pivotal Cloud Foundry 239 and earlier, UAA (aka User Account and Authentication Server) 3.4.1 and earlier, UAA release 12.2 and earlier, PCF (aka Pivotal Cloud Foundry) Elastic Runtime 1.6.x before 1.6.35, and PCF Elastic Runtime 1.7.x before 1.7.13 does not …

org.cloudfoundry.identity:cloudfoundry-identity-server Maven

Apr 24, 2017
Medium 5.3

CVE-2017-5653 EPSS 11%

Improper Certificate Validation in Apache CXF

JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that the service response was signed or encrypted, which allows remote attackers to spoof servers.

Apache Software Foundation Apache CXF org.apache.cxf:cxf-core Maven

Apr 18, 2017
Medium 5.9

CVE-2016-2402 Public exploit

Improper Certificate Validation in OkHttp

OkHttp before 2.7.4 and 3.x before 3.1.2 allows man-in-the-middle attackers to bypass certificate pinning by sending a certificate chain with a certificate from a non-pinned trusted CA and the pinned certificate.

com.squareup.okhttp3:okhttp Maven

Jan 30, 2017
Medium —

CVE-2015-1796

Improper Certificate Validation in Shibboleth Identity Provider and OpenSAML

The PKIX trust engines in Shibboleth Identity Provider before 2.4.4 and OpenSAML Java (OpenSAML-J) before 2.6.5 trust candidate X.509 credentials when no trusted names are available for the entityID, which allows remote attackers to impersonate an entity via …

org.opensaml:opensaml edu.internet2.middleware:shibboleth-identityprovider Maven

Jul 8, 2015
Medium 5.9

CVE-2014-7144

OpenStack keystonemiddleware does not verify certificate

OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, which allows remote a…

python-keystoneclient python-keystoneclient python-keystonemiddleware keystonemiddleware Debian Ubuntu PyPI

Oct 2, 2014
Medium 5.9

CVE-2012-3446

Apache Libcloud vulnerable to certificate impersonation

Apache Libcloud before 0.11.1 uses an incorrect regular expression during verification of whether the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle atta…

apache-libcloud libcloud Debian PyPI

Nov 4, 2012
Medium —

CVE-2012-5783

Improper Certificate Validation in Apache Commons HttpClient

Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certif…

trino trino-plugin-opensearch trino-plugin-pinot trino-plugin-lakehouse Debian Wolfi Maven

Nov 4, 2012
Medium 5.9

CVE-2012-2993

Microsoft Windows Phone 7 does not verify the domain name in the subject's Common Name (CN) field of an X.509 certifica…

Sep 18, 2012
Medium 5.9

CVE-2011-0199

The Certificate Trust Policy component in Apple Mac OS X before 10.6.8 does not perform CRL checking for Extended Valid…

Jun 24, 2011