Skip to content
OpenAdvisories

Weakness (CWE)

CWE-298: Improper Validation of Certificate Expiration

Variant Draft

A certificate expiration is not validated or is incorrectly validated.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Check for expired certificates and provide the user with adequate information about the nature of the problem and how to proceed.

  2. Implementation

    If certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the expiration.

Source: MITRE CWE-298

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.