Fallos del tipo CWE-331

97 resultados

Entropia Insuficiente

A geração de números aleatórios ou valores criptográficos usa fonte de aleatoriedade fraca (como timestamp, PID ou função pseudoaleatória simples), permitindo que um atacante preveja ou reproduza os valores gerados. Isso compromete a segurança de tokens, chaves, nonces e IDs que deveriam ser imprevisíveis.

Ejemplo

Um sistema gera tokens de sessão usando apenas Math.random() ou concatenando a hora atual com um número sequencial. Um atacante consegue adivinhar tokens válidos de outros usuários porque a origem de aleatoriedade é reproduzível ou tem espaço de busca pequeno.

Cómo mitigar

Use geradores criptográficos recomendados pelo sistema operacional: os.urandom() (Python), crypto.getRandomBytes() (Node.js), SecureRandom (Java) ou /dev/urandom (Linux). Nunca use Math.random(), rand() ou funções baseadas em clock/PID para segurança.

CVE-2023-46648HIGHInsufficient Entropy in GitHub Enterprise Server Management Console Invitation TokenEPSS 0.7%CVE-2020-29505HIGHDell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain a Key ManagemenEPSS 0.7%CVE-2024-3411CRITICALInsufficient Randomness When Validating an IPMI Authenticated SessionEPSS 0.7%CVE-2023-4344CRITICALBroadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connectionEPSS 0.7%CVE-2020-36925HIGHArteco Web Client DVR/NVR Session ID Brute Force Authentication BypassEPSS 0.7%CVE-2024-6508HIGHOpenshift-console: oauth2 insufficient state parameter entropyEPSS 0.7%CVE-2026-7210MEDIUMThe expat and elementtree parsers use insufficient entropy for XML hash-flooding protectionEPSS 0.7%CVE-2024-8796MEDIUMInsufficient Default OTP Shared Secret LengthEPSS 0.6%CVE-2025-47781CRITICALRallly Insufficient Password Login Token Entropy Leads to Account TakeoverEPSS 0.6%CVE-2024-25407HIGHSteVe v3.6.0 was discovered to use predictable transaction ID's when receiving a StartTransaction request. This vulnerability can allow attaEPSS 0.6%CVE-2026-11403HIGHNexus Repository Manager - Insufficient Entropy in Format-Specific API Key GenerationEPSS 0.5%CVE-2024-58134HIGHMojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as an HMAC session cookie secret by defaultEPSS 0.5%CVE-2017-2625MEDIUMIt was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a locEPSS 0.5%CVE-2025-67504CRITICALWBCE CMS has Weak Random Number Generator in Password Generation FunctionEPSS 0.5%CVE-2023-36610MEDIUM ​The affected TBox RTUs generate software security tokens using insufficient entropy. The random seed used to generate the software tokens EPSS 0.5%CVE-2026-13639CRITICALAn insufficient entropy vulnerability in login logic in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009EPSS 0.5%CVE-2025-52464CRITICALMeshtastic Repeated Public and Private KeypairsEPSS 0.5%CVE-2023-34973LOWQTS, QuTS heroEPSS 0.5%CVE-2025-66565CRITICALFiber Utils UUIDv4 and UUID Silent Fallback to Predictable ValuesEPSS 0.5%CVE-2026-38447CRITICALosTicket 1.18.3 generates API keys using a predictable construction based on MD5 hashing. The use of MD5, combined with predictable inputs sEPSS 0.5%