Fallos del tipo CWE-295

1017 resultados

Validação inadequada de certificados SSL/TLS

A aplicação não valida corretamente o certificado SSL/TLS do servidor remoto, aceitando certificados inválidos, expirados ou de domínios diferentes. Isso permite ataques man-in-the-middle onde um atacante intercepta a comunicação mesmo com criptografia, comprometendo a confidencialidade e integridade dos dados.

Ejemplo

Uma API cliente ignora erros de validação de certificado (ex: desabilita verificação de hostname ou ignora exceções de certificado inválido) e faz requisições HTTPS para servidores externos. Um atacante na rede intercepta o tráfego, apresenta seu próprio certificado, e consegue ler dados sensíveis como tokens de autenticação ou credenciais.

Cómo mitigar

Sempre validar certificados: verificar hostname, data de validade e cadeia de confiança. Usar bibliotecas padrão do seu runtime (HttpClient do .NET, requests do Python, etc.) com validação ativada por padrão. Nunca desabilitar validação SSL/TLS em produção; se precisar em desenvolvimento, use variáveis de ambiente e revise criticamente o código antes de deploy.

CVE-2018-0334—A vulnerability in the certificate management subsystem of Cisco AnyConnect Network Access Manager and of Cisco AnyConnect Secure Mobility CEPSS 1.0%CVE-2020-8156—A missing verification of the TLS host in Nextcloud Mail 1.1.3 allowed a man in the middle attack.EPSS 1.0%CVE-2022-46496MEDIUMBTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate.EPSS 0.9%CVE-2017-2649—It was found that the Active Directory Plugin for Jenkins up to and including version 2.2 did not verify certificates of the Active DirectorEPSS 0.9%CVE-2022-0759—A flaw was found in all versions of kubeclient up to (but not including) v4.9.3, the Ruby client for Kubernetes REST API, in the way it parsEPSS 0.9%CVE-2016-10534—electron-packager is a command line tool that packages Electron source code into `.app` and `.exe` packages. along with Electron. The `--strEPSS 0.9%CVE-2022-33684HIGHApache Pulsar C++/Python OAuth Clients prior to 3.0.0 were vulnerable to an MITM attack due to Disabled Certificate ValidationEPSS 0.9%CVE-2020-15133HIGHMissing TLS certificate verification in Faye WebsocketEPSS 0.9%CVE-2022-20814HIGHCisco Expressway Series and Cisco TelePresence VCS Improper Certificate Validation VulnerabilityEPSS 0.9%CVE-2025-48802MEDIUMWindows SMB Server Spoofing VulnerabilityEPSS 0.9%CVE-2025-68121CRITICALUnexpected session resumption in crypto/tlsEPSS 0.9%CVE-2020-3155HIGHCisco Intelligent Proximity SSL Certificate Validation VulnerabilityEPSS 0.9%CVE-2019-20461CRITICALAn issue was discovered on Alecto IVM-100 2019-11-12 devices. The device uses a custom UDP protocol to start and control video and audio serEPSS 0.9%CVE-2019-1683MEDIUMCisco SPA112, SPA525, and SPA5x5 Series IP Phones Certificate Validation VulnerabilityEPSS 0.9%CVE-2020-2033MEDIUMGlobalProtect App: Missing certificate validation vulnerability can disclose pre-logon authentication cookieEPSS 0.9%CVE-2019-1948MEDIUMCisco Webex Meetings Mobile (iOS) SSL Certificate Validation VulnerabilityEPSS 0.9%CVE-2026-108131HIGHActive Directory Federation Services (AD FS) Spoofing VulnerabilityEPSS 0.9%CVE-2020-15134HIGHMissing TLS certificate verification in FayeEPSS 0.9%CVE-2023-32330HIGHIBM Security Verify Access man in the middleEPSS 0.9%CVE-2021-32728MEDIUMEnd-to-end encryption device setup did not verify public keyEPSS 0.9%