Weaknesses of type CWE-338

169 results

Uso de gerador de números pseudoaleatórios criptograficamente fraco

A aplicação usa funções como Math.random(), rand() ou similar para gerar valores que precisam ser impredizíveis (tokens, chaves, nonces). Esses geradores não foram projetados para segurança criptográfica e são facilmente previsíveis, permitindo um atacante adivinhar ou reproduzir os valores gerados.

Example

Um servidor Java gera tokens de sessão usando Math.random() em vez de SecureRandom, ou uma API Node.js cria chaves de reset de senha com Math.random(). Um atacante consegue predizer os próximos tokens testando sequências ou analisando padrões.

How to mitigate

Use geradores criptograficamente seguros: SecureRandom em Java, secrets em Python, crypto.randomBytes() em Node.js, random_bytes() em PHP. Garanta que esses valores sejam usados exclusivamente para fins de segurança (tokens, chaves, IVs).

CVE-2023-48224HIGHCryptographically Weak Generation of One-Time Codes for Identity Verification in ethyca-fidesEPSS 1.0%CVE-2021-3990MEDIUMUse of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdocEPSS 0.9%CVE-2022-23472MEDIUMUse of insecure random number generator in PasseoEPSS 0.9%CVE-2024-25389HIGHRT-Thread through 5.0.2 generates random numbers with a weak algorithm of "seed = 214013L * seed + 2531011L; return (seed >> 16) & 0x7FFF;" EPSS 0.8%CVE-2022-44796CRITICALAn issue was discovered in Object First Ootbi BETA build 1.0.7.712. The authorization service has a flow that allows getting access to the WEPSS 0.8%CVE-2026-14495HIGHDoLogin Security <= 4.3 - Unauthenticated Authentication Bypass via Insufficient Randomness via 'dologin' Parameter Weak PRNG TokenEPSS 0.8%CVE-2026-93868CRITICALCotonti through 1.0.0 Predictable Password Recovery Token via Weak PRNGEPSS 0.7%CVE-2025-3495CRITICALCOMMGR - Insufficient Randomization Authentication BypassEPSS 0.7%CVE-2026-9323CRITICALInsecure PRNG and Information Exposure in urwid Web Display BackendEPSS 0.7%CVE-2023-24828HIGHUse of Cryptographically Weak Pseudo-Random Number Generator in OnedevEPSS 0.7%CVE-2026-92749CRITICALSafeLine through 9.4.1 Authentication Bypass via Weak Session SecretEPSS 0.7%CVE-2025-59390CRITICALApache Druid: Kerberos authenticaton chooses a cryptographically unsecure secret if not configured explicitly.EPSS 0.7%CVE-2023-2884CRITICALInsecure Randomness in CBOT's ChatbotEPSS 0.7%CVE-2022-45782HIGHAn issue was discovered in dotCMS core 5.3.8.5 through 5.3.8.15 and 21.03 through 22.10.1. A cryptographically insecure random generation alEPSS 0.6%CVE-2025-40931CRITICALApache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session idEPSS 0.6%CVE-2025-22376MEDIUMIn Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in randEPSS 0.6%CVE-2025-1796HIGHAdmin account takeover through weak Pseudo-Random number generator used in generating password reset codes in langgenius/difyEPSS 0.6%CVE-2026-18611HIGHData-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentialsEPSS 0.6%CVE-2024-58135MEDIUMMojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by defaultEPSS 0.6%CVE-2026-5088HIGHApache::API::Password versions through 0.5.2 for Perl can generate insecure random values for saltsEPSS 0.6%