The product does not check or incorrectly checks the revocation status of a certificate, which may cause it to use a certificate that has been compromised.
Ensure that certificates are checked for revoked status.
If certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the revoked status.
Our security experts can help you identify and remediate CWE-299 vulnerabilities in your codebase.
Get Security Assessment