CWE-296
Improper Following of a Certificate's Chain of Trust
The product does not follow, or incorrectly follows, the chain of trust for a certificate back to a trusted root certificate.
Impactr finds and proves whether CWE-296 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.