CWE-370Variant

Missing Check for Certificate Revocation after Initial Check

Draft in the CWE catalog · 0 CVEs mapped

0
CVEs mapped
What it is

The product does not check the revocation status of a certificate after its initial revocation check, which can cause the product to perform privileged actions even after the certificate is revoked at a later time.

The record
Technical detail
CWE ID
CWE-370
Abstraction
Variant
Structure
Simple
Status
Draft
References (1)