Weakness (CWE)

CWE-299: Improper Check for Certificate Revocation

Base Draft

The product does not check or incorrectly checks the revocation status of a certificate.

How to prevent it (2 mitigations)

Architecture and Design

Ensure that certificates are checked for revoked status.
Implementation

If certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the revoked status.

Nothing found.