The product does not validate, or incorrectly validates, a certificate.
1,400 vulnerabilities with CWE-295
CVE-2019-1590
HIGH
Cisco Nexus 9000 - Insecure TLS Client Auth
CVSS 8.1
CVE-2019-10317
MEDIUM
Jenkins SiteMonitor Plugin < 0.5 - SSL/TLS and Hostname Verification Disabled
CVSS 5.9
CVE-2019-10314
MEDIUM
Jenkins Koji Plugin < 0.3 - Improper Certificate Validation
CVSS 5.9
CVE-2019-11324
HIGH
urllib3 < 1.24.2 - Improper Certificate Validation via SSL Context Handling
CVSS 7.5
CVE-2019-10914
CRITICAL
MatrixSSL < 4.0.2 - Stack-Based Buffer Overflow in X.509 Certificate Verification
CVSS 9.8
CVE-2019-1757
MEDIUM
Cisco IOS and IOS XE - Unauthenticated Sensitive Data Exposure via Smart Call Home Certificate Validation
CVSS 5.9
CVE-2019-1748
HIGH
Cisco IOS - Unauthenticated Improper Certificate Validation
CVSS 7.4
CVE-2019-3814
HIGH
Dovecot 1.1.0-2.2.36 - Improper Certificate Validation
CVSS 7.7
CVE-2019-3841
HIGH
Kubevirt containerized_data_importer 1.4.0-1.5.3 - Improper Certificate Validation in Container Registry Import
CVSS 7.4
CVE-2019-8351
CRITICAL
Heimdal Thor Agent 2.5.17x - Improper Certificate Validation
CVSS 9.1
CVE-2019-6702
MEDIUM
MasterCard Qkr! with MasterPass < 5.0.8 - Improper Certificate Validation
CVSS 5.9
CVE-2019-5729
HIGH
Splunk-SDK-Python < 1.6.6 - Improper Certificate Validation
CVSS 8.1
CVE-2019-3777
HIGH
Pivotal Application Service 2.2.0-2.2.11, 2.3.0-2.3.6, 2.4.0-2.4.2 - SSL Certificate Validation Bypass
CVSS 8.0
CVE-2019-6592
CRITICAL
F5 BIG-IP 14.1.0 - Denial of Service via SSL Certificate Validation
CVSS 9.1
CVE-2019-6266
CRITICAL
Cordaware bestinformed < 6.2.1.0 - Insecure SSL Certificate Verification
CVSS 9.8
CVE-2019-1683
HIGH
Cisco SPA112, SPA525, and SPA5X5 Series IP Phones - Unauthenticated TLS Certificate Validation Bypass
CVSS 7.4
CVE-2019-7728
HIGH
Bosch Smart Camera App <1.3.1 - Man-in-the-Middle
CVSS 7.5
CVE-2019-1659
HIGH
Cisco Prime Infrastructure 2.2-3.4.0 - Unauthenticated Man-in-the-Middle via Improper SSL Certificate Validation
CVSS 7.4
CVE-2019-8337
MEDIUM
mpop 1.4.3 and msmtp 1.8.2 - Improper Certificate Validation
CVSS 5.3
CVE-2019-1003009
HIGH
Jenkins Active Directory Plugin <2.10 - RCE
CVSS 7.4
CVE-2019-3807
LOW
PowerDNS Recursor 4.1.0-4.1.8 - Improper Certificate Validation
CVSS 3.7
CVE-2018-19946
MEDIUM
QNAP Helpdesk < 3.0.3 - Improper Certificate Validation
CVSS 4.2
CVE-2018-11751
MEDIUM
Puppet Server 6.0.0-6.3.9 - Improper Certificate Validation
CVSS 5.4
CVE-2018-21029
CRITICAL
systemd 239-245 - Improper Certificate Validation in DNS Over TLS
CVSS 9.8
CVE-2018-20135
HIGH
Samsung Galaxy Apps <4.4.01.7 - SSRF
CVSS 8.1
Details
Vulnerabilities
1,400