Weaknesses of type CWE-330

196 results

Uso de valores aleatórios insuficientemente randômicos

A aplicação usa geradores de números aleatórios fracos (como Math.random(), rand() ou seeds previsíveis) para criar tokens, chaves, IVs ou outros valores que precisam ser criptograficamente seguros. Um atacante consegue prever ou reproduzir esses valores, comprometendo a segurança de autenticação, sessão ou criptografia.

Example

Um sistema gera tokens de reset de senha usando Math.random() em JavaScript ou srand(time()) em C, permitindo que um atacante adivinhe o token de outro usuário em poucas tentativas. Outro caso: usar UUID v1 (baseado em timestamp) em vez de UUID v4 (randômico) para criar chaves criptográficas.

How to mitigate

Use geradores de números aleatórios criptograficamente seguros: crypto.getRandomValues() (JS), java.security.SecureRandom (Java), secrets.token_bytes() (Python), ou equivalentes nativos da plataforma. Nunca use time() ou valores previsíveis como seed; confie em /dev/urandom ou APIs de sistema operacional que coletam entropia real.

CVE-2025-11707MEDIUMLogin Lockdown & Protection <= 2.14 - IP Block BypassEPSS 0.5%CVE-2026-2966MEDIUMCesanta Mongoose DNS Transaction ID dns.c mg_sendnsreq random valuesEPSS 0.4%CVE-2023-46740MEDIUMInsecure random string generator used for sensitive dataEPSS 0.4%CVE-2024-28013MEDIUMUse of Insufficiently Random Values vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2,EPSS 0.4%CVE-2020-10729—A flaw was found in the use of insufficiently random values in Ansible. Two random password lookups of the same length generate the equal vaEPSS 0.4%CVE-2025-10671MEDIUMyouth-is-as-pale-as-poetry e-learning JWT Token JwtUtils.java encryptSecret random valuesEPSS 0.4%CVE-2024-41708HIGHAn issue was discovered in AdaCore ada_web_services 20.0 allows an attacker to escalate privileges and steal sessions via the Random_String(EPSS 0.4%CVE-2026-27490HIGHCombodo iTop: Weak secret generation for inline imageEPSS 0.4%CVE-2022-26080MEDIUMEasily guessable session ID's in NE843 Pulsar Plus ControllerEPSS 0.4%CVE-2026-79575HIGHThe JWT signing secret in yfexam-exam v2.0 is derived from the username and the current month instead of a random server-side key, making thEPSS 0.4%CVE-2026-56706MEDIUMAdminer before 5.4.3 CSRF Token Secret Recovery via XOR MaskingEPSS 0.4%CVE-2024-6348MEDIUMPredictable seed generation after ECU resetEPSS 0.4%CVE-2026-84606HIGHA privacy issue was addressed with improved handling of identifiers. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, visiEPSS 0.4%CVE-2026-40496HIGHFreeScout has Predictable Attachment Token that Allows Unauthenticated Private File Download via Brute ForceEPSS 0.4%CVE-2026-20101HIGHA vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unEPSS 0.4%CVE-2025-6515MEDIUMReuse of session IDs in oatpp-mcp leads to session hijacking and prompt hijacking by remote attackersEPSS 0.4%CVE-2022-31008MEDIUMPredictable credential obfuscation seed value used in rabbitmq-serverEPSS 0.4%CVE-2023-22912MEDIUMAn issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. CheckUser TokenManager inEPSS 0.4%CVE-2024-35292HIGHA vulnerability has been identified in SIMATIC S7-200 SMART CPU CR40 (6ES7288-1CR40-0AA0) (All versions), SIMATIC S7-200 SMART CPU CR60 (6ESEPSS 0.4%CVE-2025-43866LOWVantage6 Server JWT secret not cryptographically secureEPSS 0.4%