2023-03-09 21:35:22 +00:00
id : mismatched-ssl-certificate
info :
name : Mismatched SSL Certificate
author : pdteam
severity : low
2023-08-17 14:14:19 +00:00
description : |
Mismatched certificates occur when there is inconsistency between the common name to which the certificate was issued and the domain name in the URL. This issue impacts the trust value of the affected website.
2023-10-14 11:27:55 +00:00
reference :
- https://www.invicti.com/web-vulnerability-scanner/vulnerabilities/ssl-certificate-name-hostname-mismatch/
2023-04-28 08:11:21 +00:00
metadata :
max-request : 1
2023-10-14 11:27:55 +00:00
tags : ssl,mismatched,tls
2023-03-09 21:35:22 +00:00
ssl :
- address : "{{Host}}:{{Port}}"
matchers :
- type : dsl
dsl :
- "mismatched == true"
- "ip != host"
condition : and
extractors :
- type : dsl
dsl :
2023-10-14 11:27:55 +00:00
- '"CN: " + subject_cn'
2023-10-20 11:41:13 +00:00
# digest: 490a004630440220798f29c2bc9b434a6fcf61677c75cf04162537cdd691ac4f39c15e2ff61c4605022051ed338e517715545c6faf50a89cef564e3fd7837af2e182304f30c6d4368be6:922c64590222798bb761d5b6d8e72950
