CWE-297 - Improper Validation of Certificate with Host Mismatch

Description

This weakness describes a case where software uses SSL/TLS connection but fails to properly verify that the certificate is associated withe the hostname.

Latest vulnerabilities for CWE-297

Multiple vulnerabilities in IBM QRadar WinCollect Agent 2024-08-19
Medium Yes

Multiple vulnerabilities in Tenable Security Center 2024-08-13
High Yes

Multiple vulnerabilities in Apple macOS Ventura 2024-07-30
High Yes

Multiple vulnerabilities in Apple macOS Monterey 2024-07-30
High Yes

Multiple vulnerabilities in Apple macOS Sonoma 2024-07-30
High Yes

Multiple vulnerabilities in Dell PowerStoreT OS 2024-07-30
High Yes

Oracle Solaris update for thrid-party components 2024-07-18
Critical Yes

Multiple vulnerabilities in PowerSC 2024-07-03
Medium Yes

Multiple vulnerabilities in Dell PowerStore Family 2024-06-20
High Yes

Multiple vulnerabilities in IBM Cognos Analytics 2024-05-02
High Yes

References

Description of CWE-297 on Mitre website