Weakness (CWE)
CWE-298: Improper Validation of Certificate Expiration
Variant Draft
A certificate expiration is not validated or is incorrectly validated.
How to prevent it (2 mitigations)
-
Architecture and Design
Check for expired certificates and provide the user with adequate information about the nature of the problem and how to proceed.
-
Implementation
If certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the expiration.
Source: MITRE CWE-298
1 result · Clear filters · Feed
-
High 7.1
iSTAR- Improper Validation of Certificate Expiration
Successful exploitation of this vulnerability could result in the product failing to re-establish communication once the certificate expires.