CWE-295Improper Certificate Validation

Description

Common consequences· 1

• Integrity / Authentication — Bypass Protection Mechanism, Gain Privileges or Assume Identity
  When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. The product might connect to a malicious host while believing it is a trusted host, or the product might be deceived into accepting spoofed data that appears to originate from a trusted host.

Potential mitigations· 2

• [Architecture and Design, Implementation]Certificates should be carefully managed and checked to assure that data are encrypted with the intended owner's public key.
• [Implementation]If certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the hostname.

Related CAPEC attack patterns· 2

Exploits (incoming)2

Compliance frameworks addressing this (incoming)2

(incoming)73

Showing top 30 of 73 by confidence. Click any target to see the full neighbourhood.

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.