Skip to content
OpenAdvisories

Weakness (CWE)

CWE-599: Missing Validation of OpenSSL Certificate

Variant Incomplete

The product uses OpenSSL and trusts or uses a certificate without using the SSL_get_verify_result() function to ensure that the certificate satisfies all necessary security requirements.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Ensure that proper authentication is included in the system design.

  2. Implementation

    Understand and properly implement all checks necessary to ensure the identity of entities involved in encrypted communications.

Source: MITRE CWE-599

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed