Weaknesses of type CWE-331

101 results

Entropia insuficiente em geração de valores aleatórios

A aplicação gera números aleatórios, tokens, chaves ou IDs usando fontes de entropia fraca ou previsível, permitindo que um atacante adivinhe ou reproduza esses valores. Isso compromete mecanismos que dependem de aleatoriedade criptográfica, como sessões, recuperação de conta e tokens de autenticação.

Example

Um sistema gera tokens de reset de senha usando Math.random() em JavaScript ou com seed baseado em timestamp previsível, permitindo que um atacante calcule o token válido antes da janela de expiração e resete a senha de qualquer usuário.

How to mitigate

Use geradores criptograficamente seguros nativos da plataforma (como `crypto.getRandomValues()` no navegador, `secrets` em Python ou `SecureRandom` em Java). Nunca use Math.random(), rand() ou srand(). Valide e revogue tokens após uso único quando possível.

CVE-2020-29505HIGHDell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain a Key ManagemenEPSS 0.8%CVE-2024-36400CRITICALnano-id is unable to generate the correct character setEPSS 0.8%CVE-2023-46648HIGHInsufficient Entropy in GitHub Enterprise Server Management Console Invitation TokenEPSS 0.7%CVE-2026-90562CRITICALLangBot before 4.10.11 Authentication Bypass via Weak Recovery KeyEPSS 0.7%CVE-2024-3411CRITICALInsufficient Randomness When Validating an IPMI Authenticated SessionEPSS 0.7%CVE-2023-4344CRITICALBroadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connectionEPSS 0.7%CVE-2024-6508HIGHOpenshift-console: oauth2 insufficient state parameter entropyEPSS 0.7%CVE-2026-7210MEDIUMThe expat and elementtree parsers use insufficient entropy for XML hash-flooding protectionEPSS 0.7%CVE-2026-38447CRITICALosTicket 1.18.3 generates API keys using a predictable construction based on MD5 hashing. The use of MD5, combined with predictable inputs sEPSS 0.7%CVE-2020-36925HIGHArteco Web Client DVR/NVR Session ID Brute Force Authentication BypassEPSS 0.7%CVE-2026-13639CRITICALAn insufficient entropy vulnerability in login logic in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009EPSS 0.7%CVE-2024-8796MEDIUMInsufficient Default OTP Shared Secret LengthEPSS 0.6%CVE-2025-47781CRITICALRallly Insufficient Password Login Token Entropy Leads to Account TakeoverEPSS 0.6%CVE-2025-52464CRITICALMeshtastic Repeated Public and Private KeypairsEPSS 0.6%CVE-2024-25407HIGHSteVe v3.6.0 was discovered to use predictable transaction ID's when receiving a StartTransaction request. This vulnerability can allow attaEPSS 0.6%CVE-2024-58134HIGHMojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as an HMAC session cookie secret by defaultEPSS 0.6%CVE-2026-71851CRITICALcrypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency ChainEPSS 0.5%CVE-2017-2625MEDIUMIt was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a locEPSS 0.5%CVE-2026-11403HIGHNexus Repository Manager - Insufficient Entropy in Format-Specific API Key GenerationEPSS 0.5%CVE-2025-67504CRITICALWBCE CMS has Weak Random Number Generator in Password Generation FunctionEPSS 0.5%