Skip to content
OpenAdvisories

Weakness (CWE)

CWE-295: Improper Certificate Validation

Base Draft

The product does not validate, or incorrectly validates, a certificate.

How to prevent it (2 mitigations)

  1. Architecture and Design, Implementation

    Certificates should be carefully managed and checked to assure that data are encrypted with the intended owner's public key.

  2. Implementation

    If certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the hostname.

Source: MITRE CWE-295

All Critical High Medium Low Exploited only Public exploit

481 results · Clear filters · Feed

  • Medium 5.0
    CVE-2005-3170

    The LDAP client on Microsoft Windows 2000 before Update Rollup 1 for SP4 accepts certificates using LDAP Secure Sockets…