COMMON WEAKNESS ENUMERATIONDraft

CWE-298

Improper Validation of Certificate Expiration

A certificate expiration is not validated or is incorrectly validated.

Soyutlama

Variant

Yapı

Simple

Sömürü İhtimali

Low

Problemi anla

Problem nedir?

A certificate expiration is not validated or is incorrectly validated.

Kök neden

Problem nasıl ve ne zaman oluşur?

Yaşam döngüsü evresi

Implementation

When the software uses certificate pinning, the developer might not properly validate all relevant components of the certificate before pinning the certificate. This can make it difficult or expensive to test after the pinning is complete.

Yaşam döngüsü evresi

Implementation

REALIZATION: This weakness is caused during implementation of an architectural security tactic.

Risk

Başarılı sömürü neye yol açar?

Other

Etkilenen güvenlik alanları: Integrity, Other

The data read from the system vouched for by the expired certificate may be flawed due to malicious spoofing.
Other

Etkilenen güvenlik alanları: Authentication, Other

Trust may be assigned to certificates that have been abandoned due to age.

Savunma

Nasıl önlenir ve çözülür?

Architecture and Design

Mimari ve tasarım yaklaşımı

Detay
Check for expired certificates and provide the user with adequate information about the nature of the problem and how to proceed.

Implementation

Uygulama aşaması savunması

Detay
If certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the expiration.

MITRE görseli

Zafiyet ilişkisi ve akışı

CWE-298 MITRE diagramı