Common Weakness Enumeration

    CWE Definition / CWE-299

    CWE-299: Improper Check for Certificate Revocation

    The product does not check or incorrectly checks the revocation status of a certificate, which may cause it to use a certificate that has been compromised.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-295: Improper Certificate Validation

    CWE-404: Improper Resource Shutdown or Release