Ssl Tls Certificate Expiration Not Validated
Description
Detects expired SSL/TLS certificates by validating the certificate's expiration date. An expired certificate represents a significant security risk as it can lead to man-in-the-middle attacks, browser security warnings, and loss of trusted HTTPS connections.
Detection Strategy
• Retrieves the SSL/TLS certificate from the target web server
• Compares the certificate's 'not valid after' date against the current UTC time
• Reports a vulnerability if the current time is later than the certificate's expiration date
Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Continuous Hacking Essential plan. If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' hacking team, fill out this contact form.