Falhas do tipo CWE-295

1.017 resultados

Validação inadequada de certificado SSL/TLS

A aplicação não valida corretamente o certificado SSL/TLS do servidor remoto, aceitando certificados inválidos, expirados ou emitidos por autoridades não confiáveis. Isso permite que um atacante em posição de intermediário (man-in-the-middle) intercepte a comunicação criptografada e acesse dados sensíveis que deveriam estar protegidos.

Exemplo

Uma aplicação mobile conecta a uma API via HTTPS mas ignora erros de validação de certificado (ou desabilita a verificação para 'facilitar testes'). Um atacante na mesma rede WiFi consegue interceptar requisições, roubar tokens de autenticação ou credenciais do usuário.

Como mitigar

Sempre validar o certificado do servidor (hostname, cadeia de confiança, data de validade). Em desenvolvimento, use certificados válidos mesmo em ambientes de teste; nunca desabilite validação em produção. Considere certificate pinning para APIs críticas, fixando o certificado esperado na aplicação.

CVE-2025-3463CRITICAL"This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation vulneEPSS 0.9%CVE-2019-1659HIGHCisco Prime Infrastructure Certificate Validation VulnerabilityEPSS 0.8%CVE-2021-21959HIGHA misconfiguration exists in the MQTTS functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. This misconfiguration significantly EPSS 0.8%CVE-2022-3761—OpenVPN Connect versions before 3.4.0.4506 (macOS) and OpenVPN Connect before 3.4.0.3100 (Windows) allows man-in-the-middle attackers to intEPSS 0.8%CVE-2022-32156HIGHSplunk Enterprise and Universal Forwarder CLI connections lacked TLS cert validationEPSS 0.8%CVE-2018-0434—Cisco SD-WAN Solution Certificate Validation VulnerabilityEPSS 0.8%CVE-2022-31183CRITICALmTLS client verification is skipped in fs2 on Node.jsEPSS 0.8%CVE-2022-29222MEDIUMImproper Certificate Validation in Pion DTLSEPSS 0.8%CVE-2024-8096MEDIUMOCSP stapling bypass with GnuTLSEPSS 0.8%CVE-2022-39264HIGHnheko vulnerable to secret poisoning using MITM on secret requests by the homeserverEPSS 0.8%CVE-2022-32151HIGHSplunk Enterprise disabled TLS validation using the CA certificate stores in Python 3 libraries by defaultEPSS 0.8%CVE-2022-31105HIGHArgo CD's certificate verification is skipped for connections to OIDC providersEPSS 0.8%CVE-2023-39441—Apache Airflow SMTP Provider, Apache Airflow IMAP Provider, Apache Airflow: SMTP/IMAP client components allowed MITM due to missing Certificate ValidationEPSS 0.8%CVE-2024-56521CRITICALAn issue was discovered in TCPDF before 6.8.0. If libcurl is used, CURLOPT_SSL_VERIFYHOST and CURLOPT_SSL_VERIFYPEER are set unsafely.EPSS 0.8%CVE-2024-52510MEDIUMNextcloud Desktop client behaves incorrectly if the initial end-to-end-encryption signature is emptyEPSS 0.8%CVE-2023-35142HIGHJenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default.EPSS 0.8%CVE-2021-1134HIGHCisco DNA Center Certificate Validation VulnerabilityEPSS 0.8%CVE-2026-21228HIGHAzure Local Remote Code Execution VulnerabilityEPSS 0.8%CVE-2025-14819MEDIUMOpenSSL partial chain store policy bypassEPSS 0.8%CVE-2011-0199MEDIUMThe Certificate Trust Policy component in Apple Mac OS X before 10.6.8 does not perform CRL checking for Extended Validation (EV) certificatEPSS 0.8%