Fallos del tipo CWE-327

413 resultados

Uso de algoritmo criptográfico fraco ou quebrado

É quando o código utiliza algoritmos de criptografia que foram comprometidos, obsoletos ou nunca foram seguros (como MD5, DES, SHA-1 em contextos sensíveis). Esses algoritmos permitem que um atacante recupere dados criptografados com esforço computacional viável, invalidando a proteção que deveriam oferecer.

Ejemplo

Uma aplicação bancária que criptografa senhas usando MD5 ou MD5(senha + salt), ou que negocia conexão HTTPS com suporte a TLS 1.0. Em ambos os casos, ferramentas públicas conseguem quebrar a proteção em horas ou minutos.

Cómo mitigar

Use algoritmos atuais: SHA-256+ (ou bcrypt/scrypt) para hashing de senhas, AES-256 para dados em repouso, e TLS 1.2+ (idealmente 1.3) para trânsito. Revise regularmente o padrão NIST ou recomendações do OWASP e retire suporte a algoritmos deprecados das suas dependências e configurações.

CVE-2025-9317HIGHAVEVA Edge Use of a Broken or Risky Cryptographic AlgorithmEPSS 0.1%CVE-2026-78236HIGHInsecure PIN derivation mechanism in Admin By Request (ABR)EPSS 0.1%CVE-2024-20070MEDIUMIn modem, there is a possible information disclosure due to using risky cryptographic algorithm during connection establishment negotiation.EPSS 0.1%CVE-2026-40641MEDIUMDell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthEPSS 0.1%CVE-2026-23601MEDIUMFrame Injection via Shared GTK Allows Traffic Spoofing and Client CompromiseEPSS 0.1%CVE-2025-54340MEDIUMA vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There is a Broken or Risky CryptEPSS 0.1%CVE-2025-30156HIGHCeph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgeryEPSS 0.1%CVE-2026-16459MEDIUMTiming side-channel in RSA PKCS#1 v1.5 decryption in Oberon PSA CryptoEPSS 0.1%CVE-2026-16458MEDIUMTiming side-channel in RSA PKCS#1 v1.5 decryption in ocryptoEPSS 0.1%CVE-2026-22063MEDIUMCVE-2026-22063 eMudhra CA Certificate Compromise in NetApp ProductsEPSS 0.1%CVE-2025-7071MEDIUMTiming side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in ocrypto libraryEPSS 0.1%CVE-2025-6521MEDIUMTrendMakers Sight Bulb Pro Use of a Broken or Risky Cryptographic AlgorithmEPSS 0.1%CVE-2025-7383MEDIUMTiming side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in Oberon PSA Crypto libraryEPSS 0.1%CVE-2026-10814LOWmilvus-io milvus Grantee ID Hash kv_catalog.go weak hashEPSS 0.1%CVE-2024-45394HIGHSecret encryption vulnerable to brute-force attacksEPSS 0.1%CVE-2019-25651CRITICALUbiquiti UniFi Devices Use of AES-CBC Allows Key Recovery and Unauthorized Device ControlEPSS 0.1%CVE-2026-10804LOWStreamlit Palette hashing.py weak hashEPSS 0.1%CVE-2026-11481LOWyoanbernabeu grepai Postgres Embedding Cache chunker.go PostgresStore.LookupByContentHash weak hashEPSS 0.1%CVE-2025-58743HIGHInsecure Encryption Algorithms Enable Brute-Force Database Credential Access in Milner ImageDirector CaptureEPSS 0.1%CVE-2026-21444MEDIUMlibtpms returns wrong initialization vector when certain symmetric ciphers are usedEPSS 0.1%