cve.bz

CWE-298: Improper Validation of Certificate Expiration

Filter

A certificate expiration is not validated or is incorrectly validated.

What the weakness is: CWE-298 at MITRE. OWASP Top 10: A07:2025 Authentication Failures

Ask an AI about CWE-298

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-298: Improper Validation of Certificate Expiration and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/298.html and https://cve.bz/cve/cwe/298?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 2.9CVE-2026-86231EPSS 0.4%

    A security flaw has been discovered in mwiede jsch up to 2.28.5. Affected is the function getRevokedKeys of the file src/main/java/com/jcraft/jsch/KnownHosts.java. Performing a manipulation of the argument known_hosts results in improper c…

  2. 5.3CVE-2024-1248EPSS 0.3%

    The silent Just-In-Time (JIT) provisioning feature in federated authentication implementations fails to properly segregate user roles during account creation when a federated user shares a username with a local user. This allows the provis…

  3. 10.0CVE-2025-67109EPSS 0.3%

    Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows attackers to bypass certificate checks and execute commands with System privileges.

  4. 10.0CVE-2025-67108EPSS 0.3%

    eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections.

  5. 7.1CVE-2025-61736EPSS 0.1%

    Successful exploitation of this vulnerability could result in the product failing to re-establish communication once the certificate expires.

  6. 5.5CVE-2025-59036EPSS 0.2%

    Infrahub offers a central hub to manage data, templates, and playbooks. Prior to versiond 1.3.9 and 1.4.5, a bug in the authentication logic will cause API tokens that were deleted and/or expired to be considered valid. This means that any…

  7. 6.0CVE-2025-4384EPSS 0.1%

    The MQTT add-on of PcVue fails to verify that a remote device’s certificate has not already expired or has not yet become valid. This allows malicious devices to present certificates that are not rejected properly. The use of a client cer…

  8. 6.5CVE-2023-42446EPSS 0.5%

    Pow is a authentication and user management solution for Phoenix and Plug-based apps. Starting in version 1.0.14 and prior to version 1.0.34, use of `Pow.Store.Backend.MnesiaCache` is susceptible to session hijacking as expired keys are no…