CWE-298 6 CVEs MITRE definition ↗

CWE-298: Improper Validation of Certificate Expiration

Overview

CWE-298 (Improper Validation of Certificate Expiration) documents a weakness type used across vulnerability databases and security assessments. Use the sections below for definition, context, and mapped CVEs.

Security impact
Security impact: Depends on product and context; use CVE records, severity scores, and MITRE guidance to prioritize.

Description

A certificate expiration is not validated or is incorrectly validated.

Applicable platforms

Kind Name Class Prevalence OS / CPE
language Not Language-Specific Undetermined

Related CVEs in this database

These CVEs are mapped to this weakness in this database and kept for traceability and search.

CVE Published Summary
CVE-2025-67109 2025-12-23 Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows attackers to bypass certificate checks and execute commands with System privileges.
CVE-2025-67108 2025-12-23 eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections.
CVE-2025-61736 2025-12-17 Successful exploitation of this vulnerability could result in the product failing to re-establish communication once the certificate expires.
CVE-2025-59036 2025-09-09 Infrahub offers a central hub to manage data, templates, and playbooks. Prior to versiond 1.3.9 and 1.4.5, a bug in the authentication logic will cause API tokens that were deleted and/or expired to b…
CVE-2025-4384 2025-05-06 The MQTT add-on of PcVue fails to verify that a remote device’s certificate has not already expired or has not yet become valid. This allows malicious devices to present certificates that are not reje…
CVE-2023-42446 2023-09-18 Pow is a authentication and user management solution for Phoenix and Plug-based apps. Starting in version 1.0.14 and prior to version 1.0.34, use of `Pow.Store.Backend.MnesiaCache` is susceptible to s…

Previous names

  • Failure to Validate Certificate Expiration (2009-03-10)

Content submission

Name
CLASP
Date
2006-07-19
Version
Draft 3

Content modifications

Date Name Version Importance Comment
2008-07-01 Eric Dalci 1.0 updated Time_of_Introduction
2008-09-08 CWE Content Team 1.0 updated Common_Consequences, Relationships, Other_Notes, Taxonomy_Mappings
2009-03-10 CWE Content Team 1.3 updated Description, Name, Relationships
2009-05-27 CWE Content Team 1.4 updated Demonstrative_Examples
2009-07-27 CWE Content Team 1.5 updated Demonstrative_Examples
2009-10-29 CWE Content Team 1.6 updated Description, Other_Notes
2011-06-01 CWE Content Team 1.13 updated Common_Consequences
2012-05-11 CWE Content Team 2.2 updated References, Relationships
2013-02-21 CWE Content Team 2.4 updated Applicable_Platforms, Demonstrative_Examples, Relationships, Type
2013-07-17 CWE Content Team 2.5 updated Relationships
2014-07-30 CWE Content Team 2.8 updated Relationships
2017-11-08 CWE Content Team 3.0 updated Demonstrative_Examples, Modes_of_Introduction, Relationships
2018-03-27 CWE Content Team 3.1 updated Common_Consequences, Modes_of_Introduction, Potential_Mitigations, Time_of_Introduction
2019-09-19 CWE Content Team 3.4 updated Demonstrative_Examples
2020-02-24 CWE Content Team 4.0 updated References, Relationships
2023-04-27 CWE Content Team 4.11 updated Relationships, Time_of_Introduction
2023-06-29 CWE Content Team 4.12 updated Mapping_Notes
2025-12-11 CWE Content Team 4.19 updated Relationships, Weakness_Ordinalities
2026-04-30 CWE Content Team 4.20 updated Common_Consequences, Description, Diagram, Observed_Examples
cvelogic Threat Intelligence