Weaknesses of type CWE-327

401 results

Uso de algoritmo criptográfico fraco ou quebrado

A aplicação usa algoritmos de criptografia que já foram quebrados ou são reconhecidamente fracos (como MD5, SHA-1, DES, RC4), deixando dados sensíveis vulneráveis a ataques práticos. Mesmo que o algoritmo ainda funcione tecnicamente, um adversário pode recuperar a mensagem ou falsificar assinaturas com esforço computacional viável.

Example

Um sistema armazena senhas de usuários com hash MD5, ou usa SHA-1 para assinar tokens JWT, ou criptografa dados financeiros com DES. Em todos esses casos, há ferramentas públicas que conseguem quebrar a proteção em horas ou dias.

How to mitigate

Substitua por algoritmos modernos: SHA-256 ou melhor para hash (ou Argon2/bcrypt para senhas), AES-256 para criptografia simétrica, ECDSA ou RSA-2048+ para assinaturas. Revise periodicamente o acervo de dependências e remova bibliotecas que só ofereçam primitivas fracas.

CVE-2023-50313MEDIUMIBM WebSphere Application Server information disclosureEPSS 0.2%CVE-2025-36150MEDIUMIBM Concert Information DisclosureEPSS 0.2%CVE-2026-27804CRITICALParse Server: Account takeover via JWT algorithm confusion in Google auth adapterEPSS 0.2%CVE-2024-8452HIGHPLANET Technology switch devices - Insecure hash functions used for SNMPv3 credentialsEPSS 0.2%CVE-2025-33102MEDIUMIBM Concert Software information disclosureEPSS 0.2%CVE-2023-52236MEDIUMA vulnerability has been identified in RUGGEDCOM i800 (All versions), RUGGEDCOM i801 (All versions), RUGGEDCOM i802 (All versions), RUGGEDCOEPSS 0.2%CVE-2020-7339MEDIUMDatabase Security(DBS)-Use of a Broken or Risky Cryptographic AlgorithmEPSS 0.2%CVE-2025-66597HIGHA vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product supports weak cryptographic algorithEPSS 0.2%CVE-2026-39944HIGHCeph: CephX AES Authentication errorEPSS 0.2%CVE-2025-14456MEDIUMIBM MQ Appliance uses weaker than expected cryptographic algorithmsEPSS 0.2%CVE-2025-68702HIGHJervis has a SHA-256 Hex String Padding BugEPSS 0.2%CVE-2026-6330MEDIUMML-KEM ARM64 NEON ciphertext comparison only compares half of the inputEPSS 0.2%CVE-2025-43913MEDIUMDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 releasEPSS 0.2%CVE-2026-74888HIGHopenssl_encrypt before 1.4.0 Non-Standard PBKDF2 Key DerivationEPSS 0.2%CVE-2025-14760MEDIUMMissing cryptographic key commitment in the AWS SDK for C++ may allow a user with write access to the S3 bucket to introduce a new EDK that EPSS 0.2%CVE-2025-14480MEDIUMIBM Aspera faspio Gateway 1.3.7 has addressed a vulnerability affected by weak cryptographic algorithmsEPSS 0.2%CVE-2026-36609HIGHMercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 uses a static authentication nonce that does not change between requests froEPSS 0.2%CVE-2008-3775MEDIUMFolder Lock 5.9.5 and earlier uses weak encryption (ROT-25) for the password, which allows local administrators to obtain sensitive informatEPSS 0.2%CVE-2024-56344MEDIUMIBM Cognos Analytics 12.0.4 and 12.1.3 versions are affected by security vulnerabilitiesEPSS 0.2%CVE-2021-36647MEDIUMUse of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum.c in Mbed TLS Mbed TLS all versions before EPSS 0.2%