CWE-298 — Improper Validation of Certificate Expiration
CWE-298: Improper Validation of Certificate Expiration
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Variant |
| Status | Draft |
| Likelihood of exploit | Low |
Description
A certificate expiration is not validated or is incorrectly validated.
Common consequences
- Integrity, Other: Other
- Authentication, Other: Other
Mitigations
Architecture and Design — Check for expired certificates and provide the user with adequate information about the nature of the problem and how to proceed.
Implementation — If certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the expiration.
References
- CWE page: https://cwe.mitre.org/data/definitions/298.html
- CWE list: https://cwe.mitre.org/data/index.html