Common Weakness Enumeration
CWE-298 Improper Validation of Certificate Expiration
Description
A certificate expiration is not validated or is incorrectly validated.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-298 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-339w-3hqm-9pjc | CVE-2026-9097 | CRITICAL |
Casdoor doesn't verify that a JWT used for token exchange is still active |
2026-07-02 | |
| GHSA-v2p7-4pv4-3wwh | CVE-2025-59036 | MODERATE |
Infrahub: Deleted and expired API tokens can still authenticate |
2025-09-10 | |
| GHSA-3cjh-p6pw-jhv9 | CVE-2023-42446 | MODERATE | - |
Pow Mnesia cache doesn't invalidate all expired keys on startup |
2023-09-19 |
| GHSA-qwrj-9hmp-gpxh | CVE-2022-31145 | MODERATE |
FlyteAdmin Insufficient AccessToken Expiration Check |
2023-02-09 |