Fallos del tipo CWE-295

1017 resultados

Validação inadequada de certificados SSL/TLS

A aplicação não valida corretamente o certificado SSL/TLS do servidor remoto, aceitando certificados inválidos, expirados ou de domínios diferentes. Isso permite ataques man-in-the-middle onde um atacante intercepta a comunicação mesmo com criptografia, comprometendo a confidencialidade e integridade dos dados.

Ejemplo

Uma API cliente ignora erros de validação de certificado (ex: desabilita verificação de hostname ou ignora exceções de certificado inválido) e faz requisições HTTPS para servidores externos. Um atacante na rede intercepta o tráfego, apresenta seu próprio certificado, e consegue ler dados sensíveis como tokens de autenticação ou credenciais.

Cómo mitigar

Sempre validar certificados: verificar hostname, data de validade e cadeia de confiança. Usar bibliotecas padrão do seu runtime (HttpClient do .NET, requests do Python, etc.) com validação ativada por padrão. Nunca desabilitar validação SSL/TLS em produção; se precisar em desenvolvimento, use variáveis de ambiente e revise criticamente o código antes de deploy.

CVE-2019-1748HIGHCisco IOS and IOS XE Software Network Plug-and-Play Agent Certificate Validation VulnerabilityEPSS 1.2%CVE-2021-20230—A flaw was found in stunnel before 5.57, where it improperly validates client certificates when it is configured to use both redirect and veEPSS 1.2%CVE-2017-2639MEDIUMIt was found that CloudForms does not verify that the server hostname matches the domain name in the certificate when using a custom CA and EPSS 1.1%CVE-2024-43550HIGHWindows Secure Channel Spoofing VulnerabilityEPSS 1.1%CVE-2022-32531MEDIUMApache BookKeeper: Java Client Uses Connection to Host that Failed Hostname VerificationEPSS 1.1%CVE-2022-21654HIGHIncorrect configuration handling allows TLS session re-use without re-validation in EnvoyEPSS 1.1%CVE-2024-41996HIGHValidating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attEPSS 1.1%CVE-2019-1757—Cisco IOS and IOS XE Software Smart Call Home Certificate Validation VulnerabilityEPSS 1.1%CVE-2021-40713MEDIUMAdobe Experience Manager Improper Certificate Validation Could Lead to Man In The Middle AttackEPSS 1.0%CVE-2005-3170MEDIUMThe LDAP client on Microsoft Windows 2000 before Update Rollup 1 for SP4 accepts certificates using LDAP Secure Sockets Layer (LDAPS) even wEPSS 1.0%CVE-2021-22895—Nextcloud Desktop Client before 3.3.1 is vulnerable to improper certificate validation due to lack of SSL certificate verification when usinEPSS 1.0%CVE-2017-2623MEDIUMIt was discovered that rpm-ostree and rpm-ostree-client before 2017.3 fail to properly check GPG signatures on packages when doing layering.EPSS 1.0%CVE-2026-105794CRITICALMsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSLEPSS 1.0%CVE-2023-35721HIGHNETGEAR Multiple Routers curl_post Improper Certificate Validation Remote Code Execution VulnerabilityEPSS 1.0%CVE-2026-21945HIGHVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: SecuritEPSS 1.0%CVE-2019-3890HIGHIt was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse this flaw to get confEPSS 1.0%CVE-2019-1590HIGHCisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Insecure Fabric Authentication VulnerabilityEPSS 1.0%CVE-2022-32152HIGHSplunk Enterprise lacked TLS cert validation for Splunk-to-Splunk communication by defaultEPSS 1.0%CVE-2025-27820HIGHApache HttpComponents: PSL (Public Suffix List) validation bypassEPSS 1.0%CVE-2018-0334—A vulnerability in the certificate management subsystem of Cisco AnyConnect Network Access Manager and of Cisco AnyConnect Secure Mobility CEPSS 1.0%