CWE-299

Improper Check for Certificate Revocation

High

Description

The product does not check or incorrectly checks the revocation status of a certificate, which may cause it to use a certificate that has been compromised.

Potential Impact

How to Fix

Architecture and Design

Ensure that certificates are checked for revoked status.

Implementation

If certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the revoked status.

Detection Methods

Related Weaknesses

References

View on MITRE CWE Database →

Need Help Fixing This Vulnerability?

Our security experts can help you identify and remediate CWE-299 vulnerabilities in your codebase.

Get Security Assessment