Falhas do tipo CWE-295

1.017 resultados

Validação inadequada de certificado SSL/TLS

A aplicação não valida corretamente o certificado SSL/TLS do servidor remoto, aceitando certificados inválidos, expirados ou emitidos por autoridades não confiáveis. Isso permite que um atacante em posição de intermediário (man-in-the-middle) intercepte a comunicação criptografada e acesse dados sensíveis que deveriam estar protegidos.

Exemplo

Uma aplicação mobile conecta a uma API via HTTPS mas ignora erros de validação de certificado (ou desabilita a verificação para 'facilitar testes'). Um atacante na mesma rede WiFi consegue interceptar requisições, roubar tokens de autenticação ou credenciais do usuário.

Como mitigar

Sempre validar o certificado do servidor (hostname, cadeia de confiança, data de validade). Em desenvolvimento, use certificados válidos mesmo em ambientes de teste; nunca desabilite validação em produção. Considere certificate pinning para APIs críticas, fixando o certificado esperado na aplicação.

CVE-2022-45458MEDIUMSensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis AgeEPSS 0.4%CVE-2023-51662MEDIUMSnowflake Connector .NET does not properly check the Certificate Revocation List (CRL)EPSS 0.3%CVE-2023-3615HIGHLack of server certificate validation in websockets connectionEPSS 0.3%CVE-2025-44018HIGHA firmware downgrade vulnerability exists in the OTA Update functionality of GL-Inet GL-AXT1800 4.7.0. A specially crafted .tar file can leaEPSS 0.3%CVE-2026-76242CRITICALstigmem Federation Peer Registration Authentication BypassEPSS 0.3%CVE-2017-3182—On the iOS platform, the ThreatMetrix SDK versions prior to 3.2 fail to validate SSL certificates provided by HTTPS connections, which may allow an attacker to perform a man-in-the-middle (MITM) attackEPSS 0.3%CVE-2023-28807MEDIUMBypass of ZIA domain fronting detection module through evasion techniqueEPSS 0.3%CVE-2026-42790HIGHnameConstraints DNS bypass via subject CommonName fallback in public_key hostname verificationEPSS 0.3%CVE-2026-32293MEDIUMGL-iNet Comet (GL-RM1) KVM insufficient certificate validationEPSS 0.3%CVE-2026-84197CRITICALIn Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and oEPSS 0.3%CVE-2017-3218—Samsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic. Prior to version 5.0, Samsung Magician uses HTTP EPSS 0.3%CVE-2026-73253CRITICALMongoose: TLS Hostname Verification Bypass via Overly Permissive Wildcard MatchingEPSS 0.3%CVE-2025-2669MEDIUMMultiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.EPSS 0.3%CVE-2026-82180CRITICALIn Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate authentication policy, CertificateMqttFiEPSS 0.3%CVE-2026-66402CRITICALFreeRDP before 3.29.0 TLS Certificate Identity Validation BypassEPSS 0.3%CVE-2023-50949MEDIUMIBM QRadar improper certificate validationEPSS 0.3%CVE-2026-113812CRITICALMozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediatesEPSS 0.3%CVE-2024-4063LOWEZVIZ CS-C6-21WFR-8 Davinci Application certificate validationEPSS 0.3%CVE-2026-25644HIGHDataHub's LDAP Ingestion Source vulnerable to MITM attack through TLS downgradeEPSS 0.3%CVE-2024-28162MEDIUMIn Jenkins Delphix Plugin 3.0.1 through 3.1.0 (both inclusive) a global option for administrators to enable or disable SSL/TLS certificate vEPSS 0.3%