Skip to content
OpenAdvisories

Weakness (CWE)

CWE-324: Use of a Key Past its Expiration Date

Base Draft

The product uses a cryptographic key past its expiration date.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Adequate consideration should be put into the user interface in order to notify users previous to the key's expiration, to explain the importance of new key generation and to walk users through the process as painlessly as possible.

  2. Implementation

    Replace keys within a period of time proportional to their strength.

Source: MITRE CWE-324

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.