CWE-599
Missing Validation of OpenSSL Certificate
The product uses OpenSSL and trusts or uses a certificate without using the SSL_get_verify_result() function to ensure that the certificate satisfies all necessary security requirements.
Impactr finds and proves whether CWE-599 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.