CWE-370: Missing Check for Certificate Revocation after Initial Check
Filter
The product does not check the revocation status of a certificate after its initial revocation check, which can cause the product to perform privileged actions even after the certificate is revoked at a later time.
What the weakness is: CWE-370 at MITRE. All weaknesses
Related attack patterns (CAPEC): 2
- CAPEC-26 Leveraging Race Conditions Likelihood: High · Severity: High
- CAPEC-29 Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions Likelihood: High · Severity: High
The attack patterns MITRE's CAPEC relates to CWE-370, as MITRE names them. Credits.
Ask an AI about CWE-370
Show the prompt
Explain CWE-370: Missing Check for Certificate Revocation after Initial Check and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/370.html and https://cve.bz/cve/cwe/370?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 10.0CVE-2025-67108EPSS 0.3%
eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections.