BaseDraft
CWE-296Improper Following of a Certificate's Chain of Trust
Category: other
Description
The product does not follow, or incorrectly follows, the chain of trust for a certificate back to a trusted root certificate.
Common consequences· 2
- Non-Repudiation — Hide ActivitiesExploitation of this flaw can lead to the trust of data that may have originated with a spoofed source.
- Integrity / Confidentiality / Availability / Access Control — Gain Privileges or Assume Identity, Execute Unauthorized Code or CommandsData, requests, or actions taken by the attacking entity can be carried out as a spoofed benign entity.
Potential mitigations· 3
- [Architecture and Design]Ensure that proper certificate checking is included in the system design.
- [Implementation]Understand, and properly implement all checks necessary to ensure the integrity of certificate trust integrity.
- [Implementation]If certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the full chain of trust.
References
(incoming)3
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Vulnerability | CVE-2025-1146cve-2025-1146 | 0% | live |
| Vulnerability | CVE-2025-48057cve-2025-48057 | 0% | live |
| Vulnerability | CVE-2026-27134cve-2026-27134 | 0% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.