Missing Validation of OpenSSL Certificate

Properties

id: d3f:CWE-599

name
Missing Validation of OpenSSL Certificate
definition
The product uses OpenSSL and trusts or uses a certificate without using the SSL_get_verify_result() function to ensure that the certificate satisfies all necessary security requirements.
json

Neighbors

CWE-599 has no direct neighbors in this release.

Inferred Relationships

This page is experimental and may change significantly in future releases.

Related Countermeasure Techniques

No related defensive techniques in this release.

Related Weaknesses

Related Offensive Techniques

No related offensive techniques in this release.