Weaknesses of type CWE-338

169 results

Uso de gerador de números pseudoaleatórios criptograficamente fraco

A aplicação usa funções como Math.random(), rand() ou similar para gerar valores que precisam ser impredizíveis (tokens, chaves, nonces). Esses geradores não foram projetados para segurança criptográfica e são facilmente previsíveis, permitindo um atacante adivinhar ou reproduzir os valores gerados.

Example

Um servidor Java gera tokens de sessão usando Math.random() em vez de SecureRandom, ou uma API Node.js cria chaves de reset de senha com Math.random(). Um atacante consegue predizer os próximos tokens testando sequências ou analisando padrões.

How to mitigate

Use geradores criptograficamente seguros: SecureRandom em Java, secrets em Python, crypto.randomBytes() em Node.js, random_bytes() em PHP. Garanta que esses valores sejam usados exclusivamente para fins de segurança (tokens, chaves, IVs).

CVE-2026-8169HIGHExtremeXOS Debug-Mode Privilege Escalation via Weak PRNGEPSS 0.4%CVE-2026-104356HIGHPictShare < 3.7.1 Predictable Delete Code via rand()EPSS 0.4%CVE-2026-42155CRITICALMagento LTS: Weak API Session ID — Predictable MD5 of Time-Derived InputsEPSS 0.4%CVE-2024-5264MEDIUMNetwork Key Transfer with AES KHT vulnerability in Luna EFTEPSS 0.4%CVE-2026-5080MEDIUMDancer::Session::Abstract versions through 1.3522 for Perl generates session ids insecurelyEPSS 0.4%CVE-2025-40925CRITICALStarch versions 0.14 and earlier generate session ids insecurelyEPSS 0.4%CVE-2022-48506LOWA flawed pseudorandom number generator in Dominion Voting Systems ImageCast Precinct (ICP and ICP2) and ImageCast Evolution (ICE) scanners aEPSS 0.4%CVE-2022-26943HIGHWeak PRNG entropy source used for authentication challenge generation in Motorola MTM5000EPSS 0.4%CVE-2024-56370MEDIUMNet::Xero 0.044 and earlier for Perl uses insecure rand() function for cryptographic functionsEPSS 0.4%CVE-2026-121553MEDIUMCotonti through 1.0.0 Predictable Validation Tokens via md5(microtime())EPSS 0.4%CVE-2026-5085CRITICALSolstice::Session versions through 1440 for Perl generates session ids insecurelyEPSS 0.3%CVE-2024-53702MEDIUMUse of cryptographically weak pseudo-random number generator (PRNG) vulnerability in the SonicWall SMA100 SSLVPN backup code generator that,EPSS 0.3%CVE-2025-15618CRITICALBusiness::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret keyEPSS 0.3%CVE-2026-5084MEDIUMWebDyne::Session versions before 3.003_704 for Perl generate the session id insecurelyEPSS 0.3%CVE-2026-11832CRITICALDancer2::Plugin::Auth::OAuth versions before 0.22 for Perl default to a predictable nonceEPSS 0.3%CVE-2023-34363MEDIUMAn issue was discovered in Progress DataDirect Connect for ODBC before 08.02.2770 for Oracle. When using Oracle Advanced Security (OAS) encrEPSS 0.3%CVE-2025-15578CRITICALMaypole versions from 2.10 through 2.13 for Perl generates session ids insecurelyEPSS 0.3%CVE-2026-5087HIGHPAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurelyEPSS 0.3%CVE-2026-118986HIGHCallBackery versions before 0.62.0 for Perl allow session cookie forgery via a signing secret generated with rand()EPSS 0.3%CVE-2002-20002MEDIUMThe Net::EasyTCP package before 0.15 for Perl always uses Perl's builtin rand(), which is not a strong random number generator, for cryptogrEPSS 0.3%