Common Weakness Enumeration
CWE-296 Improper Following of a Certificate's Chain of Trust
Description
The product does not follow, or incorrectly follows, the chain of trust for a certificate back to a trusted root certificate.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-296 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-6hxq-p678-4hr2 | - | LOW |
SimpleWebAuthn: Registration verification does not sufficiently ensure that attestation certificates chain to a trust anchor |
2026-09-04 | |
| GHSA-gvrj-cjch-728p | CVE-2026-4370 | CRITICAL |
Juju has Improper TLS Client/Server authentication and certificate verification on Database Cluster |
2026-07-21 | |
| GHSA-7p63-w6x9-6gr7 | CVE-2025-12383 | CRITICAL |
Eclipse Jersey has a Race Condition |
2026-02-05 | |
| GHSA-mjcp-gpgx-ggcg | - | MODERATE |
OpenTofu incorrectly validates excluded subdomain constraint in conjunction with TLS certificates containing wildcard SANs |
2025-12-09 |