CWE-599: Missing Validation of OpenSSL Certificate
Description
The product uses OpenSSL and trusts or uses a certificate without using the SSL_get_verify_result() function to ensure that the certificate satisfies all necessary security requirements.
- Abstraction
- VariantA weakness tied to a specific language, technology or resource.
- Likelihood of exploit
- Not rated by MITRE
- Status
- Incomplete
Common consequences
- Confidentiality
Read Application Data
The data read may not be properly secured - it might be viewed by an attacker.
- Access Control
Bypass Protection Mechanism; Gain Privileges or Assume Identity
Trust afforded to the system in question may allow for spoofing or redirection attacks.
- Access Control
Gain Privileges or Assume Identity
If the certificate is not checked, it may be possible for a redirection or spoofing attack to allow a malicious host with a valid certificate to provide data under the guise of a trusted host. While the attacker in question may have a valid certificate, it may simply be a valid certificate for a different site. This...
Potential mitigations
- Architecture and Design
Ensure that proper authentication is included in the system design.
- Implementation
Understand and properly implement all checks necessary to ensure the identity of entities involved in encrypted communications.
Related weaknesses
Parent weaknesses
CAPEC attack patterns that exploit it
CWE 4.20 links no CAPEC attack pattern to this weakness.