CWE-298Improper Validation of Certificate Expiration

Description

Common consequences· 2

• Integrity / Other — Other
  The data read from the system vouched for by the expired certificate may be flawed due to malicious spoofing.
• Authentication / Other — Other
  Trust may be assigned to certificates that have been abandoned due to age.

Potential mitigations· 2

• [Architecture and Design]Check for expired certificates and provide the user with adequate information about the nature of the problem and how to proceed.
• [Implementation]If certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the expiration.

(incoming)2

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.