Common Weakness Enumeration

    CWE Definition / CWE-370

    CWE-370: Missing Check for Certificate Revocation after Initial Check

    The product does not check the revocation status of a certificate after its initial revocation check, which can cause the product to perform privileged actions even after the certificate is revoked at a later time.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-299: Improper Check for Certificate Revocation

    CWE-296: Improper Following of a Certificate's Chain of Trust

    CWE-297: Improper Validation of Certificate with Host Mismatch

    CWE-298: Improper Validation of Certificate Expiration