CWE-297— Improper Validation of Certificate with Host Mismatch

The product communicates with a host that provides a certificate, but the product does not properly ensure that the certificate is actually associated with that host.— MITRE CWE catalog

92 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-297page 2 of 2

CVE-2026-44467MEDIUMCVSS 6.8EG 6.8
2026-05-13
The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side. From 1.2581.0 to before 1.4304.0, Claude Desktop's SSH remote development feature verified only whether a hostname ex…
CVE-2024-49782MEDIUMCVSS 6.8EG 6.8
2025-02-20
IBM OpenPages with Watson 8.3 and 9.0 could allow a remote attacker to spoof mail server identity when using SSL/TLS security. An attacker could exploit this vulnerability to gain access to sensitive information disclosed through emai…
CVE-2024-2462MEDIUMCVSS 6.8EG 6.8
2024-06-11
Allow attackers to intercept or falsify data exchanges between the client and the server
CVE-2020-15260MEDIUMCVSS 6.8EG 6.8
2021-03-10
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In version 2.10 and earlier, PJSIP transport can be reused if they hav…
CVE-2022-48306MEDIUMCVSS 5.7EG 6.8
2023-02-16
Improper Validation of Certificate with Host Mismatch vulnerability in Gotham Chat IRC helper of Palantir Gotham allows A malicious attacker in a privileged network position could abuse this to perform a man-in-the-middle attack. A success…
CVE-2026-53583MEDIUMCVSS 6.5EG 6.5
2026-08-20
libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, verify_server_cert in src/libgit2/streams/…
CVE-2024-32868MEDIUMCVSS 6.5EG 6.5
2024-04-26
ZITADEL provides users the possibility to use Time-based One-Time-Password (TOTP) and One-Time-Password (OTP) through SMS and Email. While ZITADEL already gives administrators the option to define a `Lockout Policy` with a maximum amount o…
CVE-2024-2466MEDIUMCVSS 6.5EG 6.5
2024-03-27
libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS. libcurl would wrongly avoid using the set hostname function when the specified hostname was given as an …
CVE-2016-1280MEDIUMCVSS 6.5EG 6.5
2016-09-09
PKId in Juniper Junos OS before 12.1X44-D52, 12.1X46 before 12.1X46-D37, 12.1X47 before 12.1X47-D30, 12.3 before 12.3R12, 12.3X48 before 12.3X48-D20, 13.3 before 13.3R10, 14.1 before 14.1R8, 14.1X53 before 14.1X53-D40, 14.2 before 14.2R7, …
CVE-2026-58040MEDIUMCVSS 6.3EG 6.3
2026-07-30
An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies (incomplete fix of CVE-2026-48934). This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.
CVE-2022-48308MEDIUMCVSS 6.3EG 6.3
2023-02-16
It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious attacker in a privileged network position could abuse this to perform a man-in-th…
CVE-2022-48307MEDIUMCVSS 6.3EG 6.3
2023-02-16
It was discovered that the Magritte-ftp was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious attacker in a privileged network position could abuse this to perform a man-in-t…
CVE-2026-107819MEDIUMCVSS 5.9EG 5.9
2026-10-09
MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C libmariadb Zero-Configuration SSL authentication-switch logic checked certificat…
CVE-2026-9744MEDIUMCVSS 5.9EG 5.9
2026-09-03
IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques.
CVE-2026-66053MEDIUMCVSS 5.9EG 5.9
2026-07-27
Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue. This repla…
CVE-2026-34477MEDIUMCVSS 5.9EG 5.9
2026-04-10
The fix for CVE-2025-68161 https://logging.apache.org/security.html#CVE-2025-68161 was incomplete: it addressed hostname verification only when enabled via the log4j2.sslVerifyHostName https://logging.apache.org/log4j/2.x/manual/systemp…
CVE-2024-38324MEDIUMCVSS 5.9EG 5.9
2024-09-25
IBM Storage Defender 2.0.0 through 2.0.7 on-prem defender-sensor-cmd CLI does not validate server name during registration and unregistration operations which could expose sensitive information to an attacker with access to the system.
CVE-2024-8285MEDIUMCVSS 5.9EG 5.9
2024-08-30
A flaw was found in Kroxylicious. When establishing the connection with the upstream Kafka server using a TLS secured connection, Kroxylicious fails to properly verify the server's hostname, resulting in an insecure connection. For a succe…
CVE-2014-3603MEDIUMCVSS 5.9EG 5.9
2019-04-04
The (1) HttpResource and (2) FileBackedHttpResource implementations in Shibboleth Identity Provider (IdP) before 2.4.1 and OpenSAML Java 2.6.2 do not verify that the server hostname matches a domain name in the subject's Common Name (CN) o…
CVE-2017-2912MEDIUMCVSS 5.9EG 5.9
2017-11-07
An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the goclient daemon to accept a different certificate than intended.…
CVE-2017-2911MEDIUMCVSS 5.9EG 5.9
2017-11-07
An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain names can cause the rclient daemon to accept a different certificate than intended. …
CVE-2014-3596MEDIUMCVSS v2 5.8EG 5.8
2014-08-27
The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle at…
CVE-2026-91166MEDIUMCVSS 5.7EG 5.7
2026-09-21
Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. From 0.25.0 until 0.27.6, the browser SSH path in warpgate-web-ssh/src/manager.rs handles RCEvent::HostKeyUnknown without the presenting hop identity and instead passe…
CVE-2023-34143MEDIUMCVSS 5.6EG 5.6
2023-07-18
Improper Validation of Certificate with Host Mismatch vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Server, Device Manager Agent, Host Data Collector components) allows Man in the Middle Attack.This issue affect…
CVE-2026-12162MEDIUMCVSS 5.5EG 5.5
2026-06-16
Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an attacker to disclose stored social login credentials via a crafted web entry pointing to a provider lookalike domain.
CVE-2022-22305MEDIUMCVSS 5.4EG 5.4
2023-09-01
An improper certificate validation vulnerability [CWE-295] in FortiManager 7.0.1 and below, 6.4.6 and below; FortiAnalyzer 7.0.2 and below, 6.4.7 and below; FortiOS 6.2.x and 6.0.x; FortiSandbox 4.0.x, 3.2.x and 3.1.x may allow a network …
CVE-2026-102669MEDIUMCVSS 5.3EG 5.3
2026-10-01
Joyland AI app does not verify hostnames, allowing a malicious host to connect or intercept chat messages.
CVE-2025-59060MEDIUMCVSS 5.3EG 5.3
2026-03-03
Hostname verification bypass issue in Apache Ranger NiFiRegistryClient is reported in Apache Ranger versions <= 2.7.0. Users are recommended to upgrade to version 2.8.0, which fixes this issue.
CVE-2025-15079MEDIUMCVSS 5.3EG 5.3
2026-01-08
When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could still mistakenly accept connecting to hosts *not present* in the specified file if they were added as recognized in the libssh *global…
CVE-2020-1758MEDIUMCVSS 5.3EG 5.3
2020-05-15
A flaw was found in Keycloak in versions before 10.0.0, where it does not perform the TLS hostname verification while sending emails using the SMTP server. This flaw allows an attacker to perform a man-in-the-middle (MITM) attack.
CVE-2025-49015MEDIUMCVSS 4.9EG 4.9
2025-06-18
The Couchbase .NET SDK (client library) before 3.7.1 does not properly enable hostname verification for TLS certificates. In fact, the SDK was also using IP addresses instead of hostnames due to a configuration option that was incorrectly …
CVE-2026-107660MEDIUMCVSS 4.8EG 4.8
2026-10-08
FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certificate validation vulnerability in tls_open() of libavformat/tls_mbedtls.c, which skips hostname checks for IP-address hosts. Network attackers can intercept https, rtmps, …
CVE-2026-79943MEDIUMCVSS 4.8EG 4.8
2026-09-07
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Validation of Certificate with Host Mismatch vulnerability. An unauthenticated attacker with remote access …
CVE-2025-68161MEDIUMCVSS 4.8EG 4.8
2025-12-18
The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname verification of the peer certificate, even when the verifyHostName https://logging.apache.org/log4j/2.x/manual/appenders/network.html…
CVE-2024-54019MEDIUMCVSS 4.8EG 4.8
2025-06-10
A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7.4.0, versions 7.2.0 through 7.2.6, and 7.0 all versions allow an unauthorized attacker to redirect VPN connections via DNS spoofing or another…
CVE-2025-4295MEDIUMCVSS 4.6EG 4.6
2025-07-22
Improper Validation of Certificate with Host Mismatch vulnerability in HotelRunner B2B allows HTTP Response Splitting. This issue affects B2B: before 04.06.2025.
CVE-2022-29082MEDIUMCVSS 3.7EG 4.6
2022-05-26
Dell EMC NetWorker versions 19.1.x, 19.1.0.x, 19.1.1.x, 19.2.x, 19.2.0.x, 19.2.1.x 19.3.x, 19.3.0.x, 19.4.x, 19.4.0.x, 19.5.x,19.5.0.x, 19.6 and 19.6.0.1 and 19.6.0.2 contain an Improper Validation of Certificate with Host Mismatch vulnera…
CVE-2026-91769MEDIUMCVSS 4.3EG 4.3
2026-09-25
PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to the Common Name. RFC 6125 requires the CN to be ignored once the certificate presents any service id…
CVE-2025-42921MEDIUMCVSS 4.2EG 4.2
2025-04-17
In JetBrains Toolbox App before 2.6 host key verification was missing in SSH plugin
CVE-2018-19946MEDIUMCVSS 4.2EG 4.2
2020-09-11
The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this improper certificate validation vulnerability could allow an attacker to spoof a trusted entity by interfering in the communication path betwee…
CVE-2014-3522MEDIUMCVSS v2 4.0EG 4.0
2014-08-19
The Serf RA layer in Apache Subversion 1.4.0 through 1.7.x before 1.7.18 and 1.8.x before 1.8.10 does not properly handle wildcards in the Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle at…
CVE-2026-12730LOWCVSS 3.8EG 3.8
2026-08-05
IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to properly …

Map vulnerabilities like CWE-297 to your infrastructure

EchelonGraph correlates every CVE — across CWE-297 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Book a Demo →