[CPP]: Add query for CWE-297: Improper Validation of Certificate with Host Mismatch

[ihsinme]

Query PR

github/codeql#9086

Language

C/C++

CVE(s) ID list

• CVE-2013-7449
• CVE-2016-10937
• CVE-2010-1155

CWE

CWE-297: Improper Validation of Certificate with Host Mismatch

Report

1. Lack of verification of the certificate name.
2. If the program does not require verification of the certificate name, this creates the possibility of replacing the certificate and accessing the transmission channel.
3. The request provides for one of the three certificate name control methods described in opensl.
4. the request does not require control over the correct execution, as this complicates. but I'll be happy to add the exceptions found as fp.

Are you planning to discuss this vulnerability submission publicly? (Blog Post, social networks, etc).

• Yes
• No

Blog post link

https://twitter.com/ihsinme/status/1534885062180753408

[ghsecuritylab]

Your submission is now in status Test run.

For information, the evaluation workflow is the following:
Initial triage > Test run > Results analysis > Query review > Final decision > Pay > Closed

[ghsecuritylab]

Your submission is now in status Results analysis.

For information, the evaluation workflow is the following:
Initial triage > Test run > Results analysis > Query review > Final decision > Pay > Closed

[ghsecuritylab]

Your submission is now in status Query review.

For information, the evaluation workflow is the following:
Initial triage > Test run > Results analysis > Query review > Final decision > Pay > Closed

[ghsecuritylab]

Your submission is now in status Final decision.

For information, the evaluation workflow is the following:
Initial triage > Test run > Results analysis > Query review > Final decision > Pay > Closed

[ghsecuritylab]

Your submission is now in status Pay.

For information, the evaluation workflow is the following:
Initial triage > Test run > Results analysis > Query review > Final decision > Pay > Closed

[xcorail]

Created Hackerone report 1710575 for bounty 424986 : [687] [CPP]: Add query for CWE-297: Improper Validation of Certificate with Host Mismatch

[ghsecuritylab]

Your submission is now in status Closed.

For information, the evaluation workflow is the following:
Initial triage > Test run > Results analysis > Query review > Final decision > Pay > Closed

[ihsinme]

thanks