CWE-295
1,688 CVEs • Abstraction: Base
Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.
CVEs (1,688)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
The Citizens Community Bank (TN) ccb-mobile-banking/id610030469 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive inform...Show more |
1Meafinancial 1Mount Vernon Bank & Trust Mobile Banking May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The mount-vernon-bank-trust-mobile-banking/id542706679 app 3.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via...Show more |
1Citizensbanktx 1Cbtx On The Go May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The Citizens Bank (TX) cbtx-on-the-go/id892396102 app 3.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a cr...Show more |
1Myfpcu 1Financial Plus Mobile Banking May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The financial-plus-mobile-banking/id731070564 app 3.0.3 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafte...Show more |
1Meafinancial 1Avb Bank Mobile Banking May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The avb-bank-mobile-banking/id592565443 app 3.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted cert...Show more |
1Meafinancial 1Fsb Dequeen Mobile Banking May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The fsb-dequeen-mobile-banking/id1091025340 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...Show more |
1Meafinancial 1First Security Bank Sleepy Eye Mobile May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The first-security-bank-sleepy-eye-mobile/id870531890 app 3.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via...Show more |
1Meafinancial 1Community Banks Cb2go May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The community-banks-cb2go/id445828071 app 3.1.3 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certif...Show more |
The First Citizens Community Bank fccb/id809930960 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a c...Show more |
1Meafinancial 1Freedom 1st Credit Union Mobile Banking May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The Freedom First freedom-1st-credit-union-mobile-banking/id1085229458 app 3.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive...Show more |
The Lee Bank & Trust lbtc-mobile/id1068984753 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafte...Show more |
1Cayugalakenationalbank 1Cayuga Lake National Bank May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The cayuga-lake-national-bank/id1151601539 app 4.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted c...Show more |
The MEA Financial vision-bank/id420406345 app 3.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted ce...Show more |
1Wawacu 1Wawa Employees Credit Union Mobile May 13, 2026 Jun 16, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 The wawa-employees-credit-union-mobile/id1158082793 app 4.0.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a...Show more |
EMC RSA BSAFE Cert-C before 2.9.0.5 contains a potential improper certificate processing vulnerability. |
The Cybozu kintone mobile for Android 1.0.6 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certif...Show more |
The mobiGate App for Android version 2.2.1.2 and earlier and mobiGate App for iOS version 2.2.4.1 and earlier do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers a...Show more |
Acer Portal app before 3.9.4.2000 for Android does not properly validate SSL certificates, which allows remote attackers to perform a Man-in-the-middle attack via a crafted SSL certificate. |
In Lenovo Service Bridge before version 4, a bug found in the signature verification logic of the code signing certificate could be exploited by an attacker to insert a forged code signing certificate. |
Apache Hive (JDBC + HiveServer2) implements SSL for plain TCP and HTTP connections (it supports both transport modes). While validating the server's certificate during the connection setup, the client in Apache Hive befo...Show more |