Fallos del tipo CWE-295

1017 resultados

Validação inadequada de certificados SSL/TLS

A aplicação não valida corretamente o certificado SSL/TLS do servidor remoto, aceitando certificados inválidos, expirados ou de domínios diferentes. Isso permite ataques man-in-the-middle onde um atacante intercepta a comunicação mesmo com criptografia, comprometendo a confidencialidade e integridade dos dados.

Ejemplo

Uma API cliente ignora erros de validação de certificado (ex: desabilita verificação de hostname ou ignora exceções de certificado inválido) e faz requisições HTTPS para servidores externos. Um atacante na rede intercepta o tráfego, apresenta seu próprio certificado, e consegue ler dados sensíveis como tokens de autenticação ou credenciais.

Cómo mitigar

Sempre validar certificados: verificar hostname, data de validade e cadeia de confiança. Usar bibliotecas padrão do seu runtime (HttpClient do .NET, requests do Python, etc.) com validação ativada por padrão. Nunca desabilitar validação SSL/TLS em produção; se precisar em desenvolvimento, use variáveis de ambiente e revise criticamente o código antes de deploy.

CVE-2022-45100HIGH Dell PowerScale OneFS, versions 8.2.x-9.3.x, contains an Improper Certificate Validation vulnerability. An remote unauthenticated attacker EPSS 0.5%CVE-2024-1351HIGHMongoDB Server may allow successful untrusted connectionEPSS 0.5%CVE-2026-85247MEDIUMApache Camel: Camel-Knative Improper Certificate Validation When SSL Is Enabled Without a TruststoreEPSS 0.5%CVE-2021-42027—A vulnerability has been identified in SINUMERIK Edge (All versions < V3.2). The affected software does not properly validate the server cerEPSS 0.5%CVE-2026-47632HIGHAzure Connected Machine Agent Elevation of Privilege VulnerabilityEPSS 0.5%CVE-2021-29495MEDIUMNim stdlib httpClient does not validate peer certificates by defaultEPSS 0.5%CVE-2020-29504HIGH Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain a Missing RequEPSS 0.5%CVE-2026-66795CRITICALManagedcluster-import-controller: csr auto-approver does not validate certificate subject or signername (spoke→hub cluster-admin)EPSS 0.5%CVE-2021-31892—A vulnerability has been identified in SINUMERIK Analyse MyCondition (All versions), SINUMERIK Analyze MyPerformance (All versions), SINUMEREPSS 0.5%CVE-2026-70194MEDIUM.NET Framework Security Feature Bypass VulnerabilityEPSS 0.5%CVE-2025-34235CRITICALVasion Print (formerly PrinterLogic) Weak SSL/TLS Certificate Validation RCEEPSS 0.5%CVE-2017-7513MEDIUMIt was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host EPSS 0.5%CVE-2026-15554HIGHUndertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgeryEPSS 0.5%CVE-2007-5967—A flaw in Mozilla's embedded certificate code might allow web sites to install root certificates on devices without user approval.EPSS 0.5%CVE-2026-42011HIGHGnutls: gnutls: security bypass due to incorrect name constraint handlingEPSS 0.5%CVE-2021-34599HIGHImproper Certificate Validation in CODESYS GitEPSS 0.5%CVE-2026-49283HIGHSimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authentication bypassEPSS 0.5%CVE-2026-86131CRITICALFireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code ExecutionEPSS 0.5%CVE-2024-54847MEDIUMAn issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to access the Diffie-Hellman (DH) parameters and access sensitive data or exEPSS 0.5%CVE-2024-54846MEDIUMAn issue in CP Plus CP-VNR-3104 B3223P22C02424 allows attackers to obtain the EC private key and access sensitive data or execute a man-in-tEPSS 0.5%