Weaknesses of type CWE-327

401 results

Uso de algoritmo criptográfico fraco ou quebrado

A aplicação usa algoritmos de criptografia que já foram quebrados ou são reconhecidamente fracos (como MD5, SHA-1, DES, RC4), deixando dados sensíveis vulneráveis a ataques práticos. Mesmo que o algoritmo ainda funcione tecnicamente, um adversário pode recuperar a mensagem ou falsificar assinaturas com esforço computacional viável.

Example

Um sistema armazena senhas de usuários com hash MD5, ou usa SHA-1 para assinar tokens JWT, ou criptografa dados financeiros com DES. Em todos esses casos, há ferramentas públicas que conseguem quebrar a proteção em horas ou dias.

How to mitigate

Substitua por algoritmos modernos: SHA-256 ou melhor para hash (ou Argon2/bcrypt para senhas), AES-256 para criptografia simétrica, ECDSA ou RSA-2048+ para assinaturas. Revise periodicamente o acervo de dependências e remova bibliotecas que só ofereçam primitivas fracas.

CVE-2022-43917MEDIUMIBM WebSphere Application Server information disclosureEPSS 0.5%CVE-2022-36937CRITICALHHVM 4.172.0 and all prior versions use TLS 1.0 for secure connections when handling tls:// URLs in the stream extension. TLS1.0 has numerouEPSS 0.5%CVE-2025-9146HIGHLinksys E5600 Firmware checkFw.sh verify_gemtek_header risky encryptionEPSS 0.5%CVE-2023-51838HIGHYlianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm.EPSS 0.5%CVE-2022-21800MEDIUMAirspan Networks Mimosa Use of a Broken or Risky Cryptographic AlgorithmEPSS 0.5%CVE-2022-34320MEDIUMIBM CICS TX information disclosureEPSS 0.5%CVE-2022-34319MEDIUMIBM CICS TX information disclosureEPSS 0.5%CVE-2023-32043MEDIUMWindows Remote Desktop Security Feature Bypass VulnerabilityEPSS 0.5%CVE-2020-11916MEDIUMAn issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. The password for the root user is hashed using an old and deprecated hashEPSS 0.5%CVE-2021-31562MEDIUMFresenius Kabi Agilia Connect Infusion System use of a broken or risky cryptographic algorithmEPSS 0.5%CVE-2022-34309MEDIUMIBM CICS TX information disclosureEPSS 0.5%CVE-2022-34310MEDIUMIBM CICS TX information disclosureEPSS 0.5%CVE-2022-43934MEDIUMWeak Key-exchange algorithmsEPSS 0.5%CVE-2022-23539MEDIUMjsonwebtoken unrestricted key type could lead to legacy keys usageEPSS 0.5%CVE-2022-22462LOWIBM Security Verify Governance, Identity Manager virtual appliance component information disclosureEPSS 0.5%CVE-2023-38371MEDIUMIBM Security Access Manager Docker information disclosureEPSS 0.5%CVE-2021-27913LOWUse of a Broken or Risky Cryptographic AlgorithmEPSS 0.5%CVE-2022-22564MEDIUMDell EMC Unity versions before 5.2.0.0.5.173 , use(es) broken cryptographic algorithm. A remote unauthenticated attacker could potentially eEPSS 0.5%CVE-2019-15795MEDIUMpython-apt uses MD5 for validationEPSS 0.5%CVE-2022-45170MEDIUMAn issue was discovered in LIVEBOX Collaboration vDesk through v018. A Cryptographic Issue can occur under the /api/v1/vencrypt/decrypt/fileEPSS 0.4%