CWE-295 — Improper Certificate Validation
CWE-295: Improper Certificate Validation
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Base |
| Status | Draft |
| Likelihood of exploit | — |
Description
The product does not validate, or incorrectly validates, a certificate.
Common consequences
- Integrity, Authentication: Bypass Protection Mechanism, Gain Privileges or Assume Identity
Mitigations
Architecture and Design — Certificates should be carefully managed and checked to assure that data are encrypted with the intended owner's public key.
Implementation — If certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the hostname.
References
- CWE page: https://cwe.mitre.org/data/definitions/295.html
- CWE list: https://cwe.mitre.org/data/index.html