CWE-299 - Improper Check for Certificate Revocation

Description

The software does not check or incorrectly checks the revocation status of a certificate, which may cause it to use a certificate that has been compromised.

Latest vulnerabilities for CWE-299

Multiple vulnerabilities in MySQL Cluster 2024-04-17
High Yes

Multiple vulnerabilities in MySQL Enterprise Backup 2024-04-17
Medium Yes

Junos OS and Junos OS Evolved update for cURL 2024-04-12
High Yes

Multiple vulnerabilities in IBM Storage Protect Plus Server 2024-03-22
High Yes

cPanel EasyApache update for libcurl 2024-02-08
Low Yes

OCSP verification bypass with TLS session reuse in cURL 2024-01-31
Low Yes

Splunk Enterprise update for third-party packages 2023-09-04
High Yes

Splunk Universal Forwarder update for third-party packages 2023-06-05
High Yes

ClevOS update for IBM Cloud Object Storage Systems 2022-09-20
High Yes

Multiple vulnerabilities in IBM Cloud Pak for Security 2022-08-18
Critical Yes

References

Description of CWE-299 on Mitre website