Fallos del tipo CWE-295

854 resultados

Validação inadequada de certificados SSL/TLS

A aplicação não valida corretamente o certificado SSL/TLS do servidor remoto, aceitando certificados inválidos, expirados ou de domínios diferentes. Isso permite ataques man-in-the-middle onde um atacante intercepta a comunicação mesmo com criptografia, comprometendo a confidencialidade e integridade dos dados.

Ejemplo

Uma API cliente ignora erros de validação de certificado (ex: desabilita verificação de hostname ou ignora exceções de certificado inválido) e faz requisições HTTPS para servidores externos. Um atacante na rede intercepta o tráfego, apresenta seu próprio certificado, e consegue ler dados sensíveis como tokens de autenticação ou credenciais.

Cómo mitigar

Sempre validar certificados: verificar hostname, data de validade e cadeia de confiança. Usar bibliotecas padrão do seu runtime (HttpClient do .NET, requests do Python, etc.) com validação ativada por padrão. Nunca desabilitar validação SSL/TLS em produção; se precisar em desenvolvimento, use variáveis de ambiente e revise criticamente o código antes de deploy.

CVE-2023-51662MEDIUMSnowflake Connector .NET does not properly check the Certificate Revocation List (CRL)EPSS 0.3%CVE-2026-33896HIGHForge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)EPSS 0.3%CVE-2024-52330CRITICALECOVACS lawnmowers and vacuums do not properly validate TLS certificatesEPSS 0.3%CVE-2026-59825HIGHMastodon: Unwanted deactivation of SSL/TLS certificate verificationEPSS 0.3%CVE-2017-3182—On the iOS platform, the ThreatMetrix SDK versions prior to 3.2 fail to validate SSL certificates provided by HTTPS connections, which may allow an attacker to perform a man-in-the-middle (MITM) attackEPSS 0.3%CVE-2023-3615HIGHLack of server certificate validation in websockets connectionEPSS 0.3%CVE-2023-28807MEDIUMBypass of ZIA domain fronting detection module through evasion techniqueEPSS 0.3%CVE-2026-49283HIGHSimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authentication bypassEPSS 0.3%CVE-2025-28169HIGHBYD QIN PLUS DM-i Dilink OS v3.0_13.1.7.2204050.1 to v3.0_13.1.7.2312290.1_0 was discovered to cend broadcasts to the manufacturer's cloud sEPSS 0.3%CVE-2017-3218—Samsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic. Prior to version 5.0, Samsung Magician uses HTTP EPSS 0.3%CVE-2025-2669MEDIUMMultiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.EPSS 0.3%CVE-2023-50949MEDIUMIBM QRadar improper certificate validationEPSS 0.3%CVE-2022-27644MEDIUMThis vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEPSS 0.3%CVE-2026-58062CRITICALStapled OCSP response accepted without binding to the checked certificateEPSS 0.3%CVE-2026-42790HIGHnameConstraints DNS bypass via subject CommonName fallback in public_key hostname verificationEPSS 0.3%CVE-2024-4063LOWEZVIZ CS-C6-21WFR-8 Davinci Application certificate validationEPSS 0.3%CVE-2024-28162MEDIUMIn Jenkins Delphix Plugin 3.0.1 through 3.1.0 (both inclusive) a global option for administrators to enable or disable SSL/TLS certificate vEPSS 0.3%CVE-2023-21265HIGHIn multiple locations, there are root CA certificates which need to be disabled. This could lead to remote information disclosure with no adEPSS 0.3%CVE-2020-12144MEDIUMThe certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validatedEPSS 0.3%CVE-2020-12143MEDIUMThe certificate used to identify Orchestrator to EdgeConnect devices is not validatedEPSS 0.3%