CWE-297
Overview
- CWE ID
- 297
- CWE Name
- Improper Validation of Certificate with Host Mismatch
- CWE Abstraction
- Variant
- CWE structure
- Simple
- CWE Status
- Incomplete
Description
The software communicates with a host that provides a certificate, but the software does not properly ensure that the certificate is actually associated with that host.