Weakness (CWE)
CWE-298: Improper Validation of Certificate Expiration
Variant Draft
A certificate expiration is not validated or is incorrectly validated.
How to prevent it (2 mitigations)
-
Architecture and Design
Check for expired certificates and provide the user with adequate information about the nature of the problem and how to proceed.
-
Implementation
If certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the expiration.
Source: MITRE CWE-298
1 result · Clear filters · Feed
-
Low 3.7
mwiede jsch KnownHosts.java getRevokedKeys improper check for certificate revocation
A security flaw has been discovered in mwiede jsch up to 2.28.5. Affected is the function getRevokedKeys of the file src/main/java/com/jcraft/jsch/KnownHosts.java. Performing a manipulation of the argument known_hosts results in improper check for certificate…