Weaknesses of type CWE-297

76 results

Validação inadequada de certificados SSL/TLS

A aplicação não valida corretamente o certificado SSL/TLS do servidor remoto, aceitando certificados expirados, auto-assinados ou emitidos para outro domínio. Isso permite ataques man-in-the-middle onde um atacante intercepta a comunicação criptografada e se passa pelo servidor legítimo, expondo dados sensíveis como credenciais e informações de negócio.

Example

Uma app mobile conecta a uma API via HTTPS, mas o código ignora erros de validação de certificado ou desabilita verificações de hostname. Um atacante na mesma rede WiFi intercepta a requisição com um certificado falso e captura tokens de autenticação ou dados pessoais em trânsito.

How to mitigate

Implemente validação rigorosa: verificar data de validade, cadeia de certificados raiz confiável e correspondência exata de hostname. Em Java, use SSLContext com truststore correto; em Python, ative verificação SSL no requests; nunca use 'verify=False' ou equivalentes em produção. Realize auditorias de código focando em bibliotecas HTTP e sockets.

CVE-2026-48144CRITICALApache Thrift: c_glib TLS Client Missing Hostname VerificationEPSS 0.3%CVE-2025-68637CRITICALApache Uniffle: Insecure SSL Configuration in Uniffle HTTP ClientEPSS 0.2%CVE-2023-34143MEDIUMImproper Validation of Certificate Vulnerability in Hitachi Device ManagerEPSS 0.2%CVE-2025-49015MEDIUMThe Couchbase .NET SDK (client library) before 3.7.1 does not properly enable hostname verification for TLS certificates. In fact, the SDK wEPSS 0.2%CVE-2023-24568MEDIUM Dell NetWorker, contains an Improper Validation of Certificate with Host Mismatch vulnerability in Rabbitmq port which could disallow replaEPSS 0.2%CVE-2022-27890MEDIUMIt was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactoryEPSS 0.2%CVE-2024-2462MEDIUMAllow attackers to intercept or falsify data exchanges between the client and the serverEPSS 0.2%CVE-2026-66053MEDIUMApache Thrift: Python TSSLSocket Hostname Matcher ImportEPSS 0.2%CVE-2026-59638CRITICALJSSE hostname verifier CN-fallback enabled by default despite documented opt-inEPSS 0.2%CVE-2022-48307MEDIUMIt was discovered that the Magritte-ftp was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactorEPSS 0.2%CVE-2026-84197CRITICALIn Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and oEPSS 0.2%CVE-2025-42921MEDIUMIn JetBrains Toolbox App before 2.6 host key verification was missing in SSH pluginEPSS 0.2%CVE-2026-53583MEDIUMlibgit2: Inverted IP SubjectAltName Comparison in OpenSSL BackendEPSS 0.2%CVE-2022-48308MEDIUMIt was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactoryEPSS 0.2%CVE-2026-26214CRITICALXiaomi Galaxy FDS Android SDK <= 3.0.8 TLS Hostname Verification Disabled Enables MITMEPSS 0.2%CVE-2026-35563HIGHApache Directory LDAP API: LDAP client implementation does not verify if the server certificate matches the intended LDAP hostnameEPSS 0.2%CVE-2026-91166MEDIUMWarpgate: Web SSH stores a jump host's key against the target's address, so it validates as the targetEPSS 0.2%CVE-2026-44393HIGHAn issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0. The oslo.messaging RabbitMQ driver does not perform TLS hostname vEPSS 0.2%CVE-2026-15243HIGHImproper Validation of Certificate in CAS ClientEPSS 0.2%CVE-2024-54019MEDIUMA improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7.4.0, versions 7.2.0 through 7.2.6, and 7.0 EPSS 0.2%