目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

CWE-297 对宿主不匹配的证书验证不恰当 类漏洞列表 64

CWE-297 对宿主不匹配的证书验证不恰当 类弱点 64 条 CVE 漏洞汇总，含 AI 中文分析。

CWE-297 属于证书主机名验证不当漏洞。攻击者可利用中间人攻击，通过提供针对其他域名的有效证书来拦截通信，从而窃取敏感数据或篡改信息。开发者应在建立 TLS 连接时，严格比对证书中的通用名称或主题备用名称与目标主机名是否一致，确保证书仅对预期主机有效，从而保障通信的安全性与完整性。

MITRE CWE 官方描述
CWE：CWE-297 证书与主机不匹配时的验证不当 英文：产品与提供证书的某个主机进行通信，但产品未能正确确保该证书确实与该主机相关联。 即使证书格式正确、已签名并遵循信任链，它也可能仅仅是另一个站点的有效证书，而非产品正在交互的站点。为了确保数据完整性（data integrity），证书必须有效，且必须与正在访问的站点相关。即使产品尝试检查主机名（hostname），仍有可能错误地检查主机名。例如，攻击者可以创建一个名称以受信任名称开头后跟 NUL 字节的证书，这可能导致某些基于字符串的比较仅检查包含受信任名称的部分。
常见影响 (3)
Access Control Gain Privileges or Assume Identity
The data read from the system vouched for by the certificate may not be from the expected system.
Authentication, Other Other
Trust afforded to the system in question - based on the malicious certificate - may allow for spoofing or redirection attacks.
Access Control, Other Gain Privileges or Assume Identity, Other
If the certificate's host-specific data is not properly checked - such as the Common Name (CN) in the Subject or the Subject Alternative Name (SAN) extension of an X.509 certificate - it may be possible for a redirection or spoofing attack to allow a malicious host with a valid certificate to provid…
缓解措施 (2)
Architecture and Design Fully check the hostname of the certificate and provide the user with adequate information about the nature of the problem and how to proceed.
Implementation If certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the hostname.
代码示例 (1)
The following OpenSSL code obtains a certificate and verifies it.
cert = SSL_get_peer_certificate(ssl); if (cert && (SSL_get_verify_result(ssl)==X509_V_OK)) { // do secret things }
Bad · C
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-66392 Apache bRPC TLS 客户端证书域名不匹配漏洞 — Apache bRPC - - 2026-10-21
CVE-2026-85974 Progress MarkLogic Server TLS主机名验证不当漏洞 — MarkLogic Server 7.4 High 2026-10-12
CVE-2026-107819 MariaDB Connector/C TLS主机名验证失败明文密码泄露漏洞 — server 5.9 Medium 2026-10-09
CVE-2026-107660 FFmpeg 9.0.2 前 mbedTLS IP主机验证绕过漏洞 — FFmpeg 4.8 Medium 2026-10-08
CVE-2026-102669 Joyland AI 主机名检查绕过漏洞 — Joyland.ai 5.3 Medium 2026-10-01
CVE-2026-19553 Python SSLContext 主机名验证缺失漏洞 — CPython 7.6 High 2026-09-30
CVE-2026-91769 TLS主机名验证在SAN不匹配时回退到CN — PHP 4.3 Medium 2026-09-25
CVE-2026-91166 Warpgate 跳板机密钥身份验证绕过漏洞 — warpgate 5.7 Medium 2026-09-21
CVE-2026-92943 AWS IoT Device SDK for Python 证书验证错误 — AWSIoTPythonSDK 8.1 High 2026-09-17
CVE-2026-59969 ZooKeeper FIPS模式下主机不匹配证书验证不当 — Apache ZooKeeper - - 2026-09-16
CVE-2026-79636 Dell Secure Connect Gateway 加密问题漏洞 — Secure Connect Gateway 5.0 - Application 7.0 High 2026-09-09
CVE-2026-84393 Fortinet FortiOS 加密问题漏洞 — FortiOS 7.3 High 2026-09-08
CVE-2026-79943 Dell Secure Connect Gateway 加密问题漏洞 — Secure Connect Gateway 5.0 - Application 4.8 Medium 2026-09-07
CVE-2026-9744 IBM Netezza Software 加密问题漏洞 — Netezza Software 5.3 Medium 2026-09-03
CVE-2026-62243 Netty 加密问题漏洞 — netty 7.5 High 2026-08-22
CVE-2026-65942 Apache Ranger 加密问题漏洞 — Apache Ranger - - 2026-08-10
CVE-2026-12730 IBM Business Automation Workflow containers and traditional 加密问题漏洞 — Business Automation Workflow containers and traditional 3.8 Low 2026-08-05
CVE-2026-59638 Legion of the Bouncy Castle Inc BC-JAVA 加密问题漏洞 — BC-JAVA 9.3 Critical 2026-08-03
CVE-2026-66053 Apache Thrift 加密问题漏洞 — Apache Thrift 5.9 Medium 2026-07-27
CVE-2026-48145 Apache Thrift 加密问题漏洞 — Apache Thrift 8.2 High 2026-07-27
CVE-2026-48144 Apache Thrift 加密问题漏洞 — Apache Thrift 9.1 Critical 2026-07-27
CVE-2026-15243 Apereo Central Authentication Service 加密问题漏洞 — Java Apereo CAS Client 7.4 High 2026-07-24
CVE-2026-15925 Snowflake Connector for Python 加密问题漏洞 — Snowflake Connector for Python - - 2026-07-16
CVE-2026-9547 curl 加密问题漏洞 — curl - - 2026-07-03
CVE-2026-12064 curl 加密问题漏洞 — curl - - 2026-07-03
CVE-2026-54275 aio-libs aiohttp 加密问题漏洞 — aiohttp - - 2026-06-22
CVE-2026-35563 Apache Directory LDAP API 安全漏洞 — Apache Directory LDAP API - - 2026-06-01
CVE-2026-44467 Claude Code 安全漏洞 — claude-code - - 2026-05-13
CVE-2026-43869 Apache Thrift 安全漏洞 — Apache Thrift 7.5 - 2026-05-05
CVE-2026-34477 Apache Log4j 安全漏洞 — Apache Log4j Core 8.2AI High AI 2026-04-10

CWE-297（对宿主不匹配的证书验证不恰当） 是常见的弱点类别，本平台收录该类弱点关联的 64 条 CVE 漏洞。