Weakness (CWE)

CWE-295: Improper Certificate Validation

Base Draft

The product does not validate, or incorrectly validates, a certificate.

How to prevent it (2 mitigations)

Architecture and Design, Implementation

Certificates should be carefully managed and checked to assure that data are encrypted with the intended owner's public key.
Implementation

If certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the hostname.

Source: MITRE CWE-295

All Critical High Medium Low Exploited only Public exploit

1,199 results · Feed

Medium 5.9

CVE-2019-20455

Improper Certificate Validation in Heartland & Global Payments PHP SDK

Gateways/Gateway.php in Heartland & Global Payments PHP SDK before 2.0.0 does not enforce SSL certificate validations.

globalpayments/php-sdk Packagist

Feb 14, 2020
Unscored —

CVE-2019-15604 EPSS 20%

Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when sending a crafted X.509 cert…

Node.js node nodejs nodejs Debian Ubuntu Alpine

Feb 7, 2020
Critical 9.8

CVE-2020-7956

Improper Certificate Validation in HashiCorp Nomad

HashiCorp Nomad and Nomad Enterprise up to 0.10.2 incorrectly validated role/region associated with TLS certificates used for mTLS RPC, and were susceptible to privilege escalation. Fixed in 0.10.3.

nomad github.com/hashicorp/nomad Ubuntu Go

Jan 31, 2020
Low 3.7

CVE-2017-14806

Insecure handling of repodata and packages in SUSE Studio onlite

A Improper Certificate Validation vulnerability in susestudio-common of SUSE Studio onsite allows remote attackers to MITM connections to the repositories, which allows the modification of packages received over these connections. This issue affects: SUSE Stu…

SUSE Studio onsite

Jan 27, 2020
High 7.5

CVE-2020-1929

Improper Certificate Validation in Apache Beam

The Apache Beam MongoDB connector in versions 2.10.0 to 2.16.0 has an option to disable SSL trust verification. However this configuration is not respected and the certificate verification disables trust verification in every case. This exclusion also gets re…

Apache Beam org.apache.beam:beam-sdks-java-io-mongodb Maven

Jan 15, 2020
High 8.1

CVE-2020-0601 Exploited Public exploit EPSS 89%

Certificate validation bypass on Windows in crypto/x509

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making …

Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows Alpine Go

Jan 14, 2020
KEV Nov 3, 2021
Medium 5.9

CVE-2014-0161

ovirt-engine-sdk-python improper validation of hostname in x.509 certificate

ovirt-engine-sdk-python before 3.4.0.7 and 3.5.0.4 does not verify that the hostname of the remote endpoint matches the Common Name (CN) or subjectAltName as specified by its x.509 certificate in a TLS/SSL session. This could allow man-in-the-middle attackers…

ovirt-engine-sdk-python ovirt-engine-sdk-python ovirt-engine-sdk-python PyPI

Jan 2, 2020
High 7.1

CVE-2019-16561

SSL/TLS certificate validation globally and unconditionally disabled by Jenkins WebSphere Deployer Plugin

Jenkins WebSphere Deployer Plugin 1.6.1 and earlier allows users with Overall/Read access to disable SSL/TLS certificate and hostname validation for the entire Jenkins master JVM.

Jenkins Project Jenkins WebSphere Deployer Plugin org.jenkins-ci.plugins:websphere-deployer Web / CMS Maven

Dec 17, 2019
High 8.2

CVE-2019-16558

Improper Certificate Validation in Jenkins Spira Importer Plugin

Jenkins Spira Importer Plugin 3.2.3 and earlier disables SSL/TLS certificate validation for the Jenkins master JVM.

Jenkins Project Jenkins Spira Importer Plugin com.inflectra.spiratest.plugins:inflectra-spira-integration Web / CMS Maven

Dec 17, 2019
Critical 9.3

CVE-2019-14910

Keycloak Authentication Error

A vulnerability was found in keycloak 7.x, when keycloak is configured with LDAP user federation and StartTLS is used instead of SSL/TLS from the LDAP server (ldaps), in this case user authentication succeeds even if invalid password has entered.

org.keycloak:keycloak-parent Maven

Dec 5, 2019
Medium 4.0

CVE-2019-5102

An exploitable information leak vulnerability exists in the ustream-ssl library of OpenWrt, versions 18.06.4 and 15.05.…

openwrt openwrt

Nov 18, 2019
Medium 4.0

CVE-2019-5101

An exploitable information leak vulnerability exists in the ustream-ssl library of OpenWrt, versions 18.06.4 and 15.05.…

openwrt openwrt

Nov 18, 2019
High 7.5

CVE-2014-7143

Python Twisted trustRoot is not respected in HTTP client

Python Twisted 14.0 trustRoot is not respected in HTTP client

twisted twisted Debian PyPI

Nov 12, 2019
High 7.4

CVE-2019-3685

Missing TLS certificate validation for HTTPS connections in osc

Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary

Open Build Service Open Build Service osc Ubuntu

Nov 5, 2019
Medium 5.9

CVE-2013-2255

OpenStack Keystone and other components vulnerable to Improper Certificate Validation

HTTPSConnections in OpenStack Keystone 2013, OpenStack Compute 2013.1, and possibly other OpenStack components, fail to validate server-side SSL certificates.

OpenStack Keystone Compute keystone Debian PyPI

Nov 1, 2019
Medium 5.9

CVE-2010-4237

Mercurial Improper Certificate Validation vulnerability

Mercurial before 1.6.4 fails to verify the Common Name field of SSL certificates which allows remote attackers who acquire a certificate signed by a Certificate Authority to perform a man-in-the-middle attack.

Mercurial mercurial mercurial mercurial Debian PyPI

Oct 29, 2019
High 8.2

CVE-2019-10446

Jenkins Cadence vManager Plugin disables SSL/TLS and hostname verification

Jenkins Cadence vManager Plugin 2.7.0 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM.

Jenkins Project Jenkins Cadence vManager Plugin org.jenkins-ci.plugins:vmanager-plugin Web / CMS Maven

Oct 16, 2019
Medium 4.8

CVE-2019-10444

Jenkins Bumblebee HP ALM Plugin unconditionally disabled SSL/TLS certificate validation

Jenkins Bumblebee HP ALM Plugin 4.1.3 and earlier unconditionally disabled SSL/TLS and hostname verification for connections to HP ALM.

Jenkins Project Jenkins Bumblebee HP ALM Plugin org.jenkins-ci.plugins:bumblebee Web / CMS Maven

Oct 16, 2019
Medium 6.8

CVE-2019-0054

Junos OS: SRX Series: An attacker may be able to perform Man-in-the-Middle (MitM) attacks during app-id signature updates.

An Improper Certificate Validation weakness in the SRX Series Application Identification (app-id) signature update client of Juniper Networks Junos OS allows an attacker to perform Man-in-the-Middle (MitM) attacks which may compromise the integrity and confid…

Juniper Networks Junos OS Network devices

Oct 9, 2019
Medium 6.4

CVE-2019-3751

Dell EMC Enterprise Copy Data Management (eCDM) versions 1.0, 1.1, 2.0, 2.1, and 3.0 contain a certificate validation v…

DELL EMC Dell EMC Enterprise Copy Data Management (eCDM)

Sep 3, 2019
Medium 5.3

CVE-2017-18588

Improper Certificate Validation in security-framework

An issue was discovered in the security-framework crate before 0.1.12 for Rust. Hostname verification for certificates does not occur if ClientBuilder uses custom root certificates.

security-framework crates.io

Aug 26, 2019
High 8.1

CVE-2016-10931

Improper Certificate Validation in openssl

An issue was discovered in the openssl crate before 0.9.0 for Rust. There is an SSL/TLS man-in-the-middle vulnerability because certificate verification is off by default and there is no API for hostname verification.

openssl crates.io

Aug 26, 2019
Medium 5.9

CVE-2019-1948

Cisco Webex Meetings Mobile (iOS) SSL Certificate Validation Vulnerability

A vulnerability in Cisco Webex Meetings Mobile (iOS) could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data by using an invalid Secure Sockets Layer (SSL) certificate. The vulnerability is due to insufficient SSL ce…

Cisco Cisco WebEx Meetings for iOS iOS Network devices

Aug 21, 2019
Medium 6.5

CVE-2019-10381

Jenkins Codefresh Integration Plugin Improper Certificate Validation vulnerability

Jenkins Codefresh Integration Plugin 1.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM.

Jenkins Project Jenkins Codefresh Integration Plugin org.jenkins-ci.plugins:codefresh Web / CMS Maven

Aug 7, 2019
Medium 6.5

CVE-2019-10382

Jenkins VMware Lab Manager Slaves Plugin vulnerable to Improper Certificate Validation

Jenkins VMware Lab Manager Slaves Plugin 0.2.8 and earlier disables SSL/TLS and hostname verification globally for the Jenkins master JVM.

Jenkins Project Jenkins VMware Lab Manager Slaves Plugin org.jenkins-ci.plugins:labmanager Web / CMS Maven

Aug 7, 2019
High 8.1

CVE-2019-3890

It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse …

The Gnome Project evolution-ews evolution-ews evolution-ews Debian Ubuntu

Aug 1, 2019
High 7.4

CVE-2019-7615

Elastic APM agent for Ruby vulnerable to Improper Certificate Validation

A TLS certificate validation flaw was found in Elastic APM agent for Ruby versions before 2.9.0. When specifying a trusted server CA certificate via the 'server_ca_cert' setting, the Ruby agent would not properly verify the certificate returned by the APM ser…

Elastic Elastic APM agent for Ruby elastic-apm RubyGems

Jul 30, 2019
Medium 5.9

CVE-2019-1010206

kevinsawicki/http-request Missing certificate validation

OSS Http Request (Apache Cordova Plugin) 6 is affected by: Missing SSL certificate validation. The impact is: certificate spoofing. The component is: use this library when https communication. The attack vector is: certificate spoofing.

OSS Http Request (Apache Cordova Plugin) com.github.kevinsawicki:http-request Maven

Jul 23, 2019
Critical 9.8

CVE-2019-1010275

Helm Improper Certificate Validation

helm Before 2.7.2 is affected by: CWE-295: Improper Certificate Validation. The impact is: Unauthorized clients could connect to the server because self-signed client certs were aloowed. The component is: helm (many files updated, see https://github.com/helm/…

helm helm helm.sh/helm helm Ubuntu Go

Jul 17, 2019
High 7.4

CVE-2019-12855

Improper Certificate Validation in Twisted

In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections.

twisted twisted twisted python-twisted Debian Ubuntu Azure Linux Alpine PyPI

Jun 16, 2019
Medium 6.5

CVE-2019-3875

Improper Certificate Validation and Insufficient Verification of Data Authenticity in Keycloak

A vulnerability was found in keycloak before 6.0.2. The X.509 authenticator supports the verification of client certificates through the CRL, where the CRL list can be obtained from the URL provided in the certificate itself (CDP) or through the separately co…

Red Hat keycloak org.keycloak:keycloak-core Maven

Jun 12, 2019
Medium 6.5

CVE-2019-10334

Jenkins ElectricFlow Plugin globally and unconditionally disabled SSL/TLS certificate validation

Jenkins ElectricFlow Plugin 1.1.5 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM when MultipartUtility.java is used to upload files.

Jenkins Project Jenkins ElectricFlow Plugin org.jenkins-ci.plugins:electricflow Web / CMS Maven

Jun 11, 2019
High 7.5

CVE-2019-12496

Hybrid Group Gobot Improper Certificate Validation vulnerability

An issue was discovered in Hybrid Group Gobot before 1.13.0. The mqtt subsystem skips verification of root CA certificates by default.

github.com/hybridgroup/gobot Go

May 31, 2019
High 7.4

CVE-2019-12098

In the client side of Heimdal before 7.6.0, failure to verify anonymous PKINIT PA-PKINIT-KX key exchange permits a man-…

heimdal heimdal heimdal Debian Ubuntu Alpine

May 15, 2019
Unscored —

CVE-2018-5408

PrinterLogic Print Management Software fails to validate the management portal SSL certificates

The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not validate, or incorrectly validates, the PrinterLogic management portal's SSL certificate. When a certificate is invalid or malicious, it might allow an attacker to sp…

PrinterLogic Management Software

May 8, 2019
High 8.1

CVE-2019-1590

Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Insecure Fabric Authentication Vulnerability

A vulnerability in the Transport Layer Security (TLS) certificate validation functionality of Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an unauthenticated, remote attacker to perform insecure TLS client …

Cisco Cisco NX-OS Software for Nexus 9000 Series Fabric Switches ACI Mode Network devices

May 3, 2019
Medium 6.5

CVE-2019-10317

Jenkins SiteMonitor Plugin globally and unconditionally disables SSL/TLS certificate validation

Jenkins SiteMonitor Plugin 0.5 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM.

Jenkins Project Jenkins SiteMonitor Plugin org.jvnet.hudson.plugins:sitemonitor Web / CMS Maven

Apr 30, 2019
Medium 6.5

CVE-2019-10314

Jenkins Koji Plugin globally and unconditionally disables SSL/TLS certificate validation

Jenkins Koji Plugin disables SSL/TLS and hostname verification globally for the Jenkins master JVM.

Jenkins Project Jenkins Koji Plugin org.jenkins-ci.plugins:koji Web / CMS Maven

Apr 30, 2019
High 7.5

CVE-2019-11324

Improper Certificate Validation in urllib3

The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is the cor…

python-urllib3 urllib3 python-urllib3 Debian Ubuntu PyPI

Apr 18, 2019
Unscored —

CVE-2019-1757

Cisco IOS and IOS XE Software Smart Call Home Certificate Validation Vulnerability

A vulnerability in the Cisco Smart Call Home feature of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data using an invalid certificate. The vulnerability is due to insufficient cer…

Cisco Cisco IOS and IOS-XE Software iOS Network devices

Mar 28, 2019