Fallos del tipo CWE-330

179 resultados

Uso de valores insuficientemente aleatórios

A aplicação gera números ou sequências que deveriam ser impprevisíveis (tokens, IVs, salts, chaves) usando métodos fracos ou com baixa entropia. Um atacante consegue adivinhar ou reproduzir esses valores, comprometendo criptografia, autenticação ou geração de identificadores únicos.

Ejemplo

Um sistema gera tokens de sessão usando Math.random() em JavaScript ou rand() em C, que são determinísticos e preditíveis. Um atacante observa alguns tokens válidos e consegue calcular os próximos, sequestrar sessões de outros usuários.

Cómo mitigar

Use geradores criptograficamente seguros: java.security.SecureRandom em Java, secrets ou os.urandom() em Python, crypto.getRandomBytes() em Node.js. Gere valores com entropia adequada (no mínimo 128 bits para tokens) e nunca reutilize sementes.

CVE-2024-48928LOWPiwigo's secret key can be brute forcedEPSS 0.3%CVE-2026-3416MEDIUMPredictable Pseudorandom Number Generation via Webhook HMAC Secret Generation in Multiple WSO2 Products Allows Forged Event PayloadsEPSS 0.3%CVE-2025-1953LOWvLLM AIBrix Prefix Caching hash.go random valuesEPSS 0.3%CVE-2026-45673MEDIUMNetty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source PortEPSS 0.3%CVE-2021-23020—The NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and hashing algorithm which could lead to predictaEPSS 0.3%CVE-2024-42475MEDIUMOAuth library for nim allows insecure generation of state values by generateState - entropy too low and uses regular PRNG instead of CSPRNGEPSS 0.3%CVE-2026-28415MEDIUMGradio has Open Redirect in OAuth FlowEPSS 0.2%CVE-2026-92930MEDIUMOpenEye Apex Network Video Recorder (NVR) firmware 3.2.9.376 uses an administrator password-reset unlock-code design that lacks a per-deviceEPSS 0.2%CVE-2026-79575HIGHThe JWT signing secret in yfexam-exam v2.0 is derived from the username and the current month instead of a random server-side key, making thEPSS 0.2%CVE-2026-34511MEDIUMOpenClaw < 2026.4.2 - PKCE Verifier Exposure via OAuth State ParameterEPSS 0.2%CVE-2026-17274MEDIUMIBM i is Affected By Multiple Vulnerabilities in Debug ServerEPSS 0.2%CVE-2026-7847LOWchatchat-space Langchain-Chatchat Uploaded File openai_routes.py _get_file_id random valuesEPSS 0.2%CVE-2026-57082MEDIUMNet::BitTorrent versions before 2.1.0 for Perl generate the MSE Diffie-Hellman private key with a non-cryptographic PRNGEPSS 0.2%CVE-2024-10604MEDIUMIdentifiable Header Values In Fuchsia Leading To Tracking of The UserEPSS 0.2%CVE-2026-92912HIGHAVideo Cryptographically Weak PRNG via uniqid Stream KeyEPSS 0.2%CVE-2026-19485CRITICALBucket Squatting in Vertex AI Search for CommerceEPSS 0.2%CVE-2026-18531MEDIUMIBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak HMAC Session SecretEPSS 0.2%CVE-2026-86187HIGHWWBN AVideo Weak PRNG Password Generation via External LoginEPSS 0.2%CVE-2025-11723MEDIUMAppointment Booking Calendar — Simply Schedule Appointments Booking Plugin <= 1.6.9.5 - Unauthenticated Sensitive Information ExposureEPSS 0.2%CVE-2026-50009MEDIUMNetty QUIC stateless reset token material exposed through header-visible connection IDsEPSS 0.2%