The product uses OpenSSL and trusts or uses a certificate without using the SSL_get_verify_result() function to ensure that the certificate satisfies all necessary security requirements.
Ensure that proper authentication is included in the system design.
Understand and properly implement all checks necessary to ensure the identity of entities involved in encrypted communications.
Our security experts can help you identify and remediate CWE-599 vulnerabilities in your codebase.
Get Security Assessment