Fallos del tipo CWE-327

413 resultados

Uso de algoritmo criptográfico fraco ou quebrado

É quando o código utiliza algoritmos de criptografia que foram comprometidos, obsoletos ou nunca foram seguros (como MD5, DES, SHA-1 em contextos sensíveis). Esses algoritmos permitem que um atacante recupere dados criptografados com esforço computacional viável, invalidando a proteção que deveriam oferecer.

Ejemplo

Uma aplicação bancária que criptografa senhas usando MD5 ou MD5(senha + salt), ou que negocia conexão HTTPS com suporte a TLS 1.0. Em ambos os casos, ferramentas públicas conseguem quebrar a proteção em horas ou minutos.

Cómo mitigar

Use algoritmos atuais: SHA-256+ (ou bcrypt/scrypt) para hashing de senhas, AES-256 para dados em repouso, e TLS 1.2+ (idealmente 1.3) para trânsito. Revise regularmente o padrão NIST ou recomendações do OWASP e retire suporte a algoritmos deprecados das suas dependências e configurações.

CVE-2025-68931HIGHJervis has AES CBC Mode Without AuthenticationEPSS 0.2%CVE-2025-66597HIGHA vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product supports weak cryptographic algorithEPSS 0.2%CVE-2025-43723MEDIUMDell PowerScale OneFS, versions prior to 9.10.1.3 and versions 9.11.0.0 through 9.12.0.0, contains a use of a broken or risky cryptographic EPSS 0.2%CVE-2026-5682MEDIUMMeesho Online Shopping App com.meesho.supply endpoint risky encryptionEPSS 0.2%CVE-2025-2545LOWDeprecated 3DES cryptographic algorithm used by Request Tracker in emails encrypted with S/MIMEEPSS 0.2%CVE-2024-26317MEDIUMIn illumos illumos-gate 2024-02-15, an error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinatEPSS 0.2%CVE-2025-14456MEDIUMIBM MQ Appliance uses weaker than expected cryptographic algorithmsEPSS 0.2%CVE-2025-36150MEDIUMIBM Concert Information DisclosureEPSS 0.2%CVE-2024-45671MEDIUMIBM Security Verify Information Queue information disclosureEPSS 0.2%CVE-2025-14480MEDIUMIBM Aspera faspio Gateway 1.3.7 has addressed a vulnerability affected by weak cryptographic algorithmsEPSS 0.2%CVE-2026-118684HIGHMONAI before 1.6.1 Missing Integrity Verification via check_hash in DownloadsEPSS 0.2%CVE-2026-9261HIGHUse of weak SSH cryptographic algorithms in Canon EOS Network Setting Tool Version 1.5.0 or earlierEPSS 0.2%CVE-2026-8803MEDIUMopensourcepos Open Source Point of Sale Employee Login Employee.php login weak hashEPSS 0.2%CVE-2026-5926MEDIUMSecurity vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessEPSS 0.2%CVE-2024-5559MEDIUMCWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists that could cause denial of service, device reboot, or an attaEPSS 0.2%CVE-2025-66598HIGHA vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product supports old SSL/TLS versions, potenEPSS 0.2%CVE-2023-50313MEDIUMIBM WebSphere Application Server information disclosureEPSS 0.2%CVE-2024-8452HIGHPLANET Technology switch devices - Insecure hash functions used for SNMPv3 credentialsEPSS 0.2%CVE-2025-33102MEDIUMIBM Concert Software information disclosureEPSS 0.2%CVE-2025-45767HIGHjose v6.0.10 was discovered to contain weak encryption. NOTE: this is disputed by a third party because the claim of "do not meet recommendeEPSS 0.2%