CWE-299
Improper Check for Certificate Revocation
The product does not check or incorrectly checks the revocation status of a certificate, which may cause it to use a certificate that has been compromised.
Impactr finds and proves whether CWE-299 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.