CWE-298—Improper Validation of Certificate Expiration
PUBLISHEDweakness recordLow
released 2006-07-19 · last modified 2026-04-30
Metadata
- CWE ID：
- CWE-298
- 摘要：
- Variant
- 结构：
- Simple
- 状态：
- Draft
- 发布日期：
- 2006-07-19
- 更新日期：
- 2026-04-30
名称
Improper Validation of Certificate Expiration
描述
A certificate expiration is not validated or is incorrectly validated.
常见后果
- 范围：
- Integrity, Other
- 影响：
- Other
- 注释：
- The data read from the system vouched for by the expired certificate may be flawed due to malicious spoofing.
- 范围：
- Authentication, Other
- 影响：
- Other
- 注释：
- Trust may be assigned to certificates that have been abandoned due to age.
