Fallos del tipo CWE-338

154 resultados

Uso de gerador de números pseudoaleatórios criptograficamente fraco

A aplicação utiliza funções de geração de números aleatórios (como Math.random(), rand() ou similar) que não são adequadas para fins criptográficos, permitindo que um atacante preveja ou reproduza os valores gerados. Isso compromete a segurança de operações sensíveis como geração de tokens, chaves de sessão, nonces e valores criptográficos.

Ejemplo

Um servidor web gera tokens de autenticação usando Math.random() em JavaScript ou rand() em C. Um atacante observa alguns tokens válidos, consegue adivinhar o padrão ou seed do gerador e forja um token válido para sequestrar sessões de outros usuários.

Cómo mitigar

Utilize geradores de números aleatórios criptograficamente seguros: crypto.getRandomValues() em JavaScript/navegadores, SecureRandom em Java, secrets em Python, ou /dev/urandom em sistemas Unix. Nunca use funções de propósito geral (Math.random, rand) para operações criptográficas ou de segurança.

CVE-2021-3990MEDIUMUse of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in star7th/showdocEPSS 0.9%CVE-2026-61500CRITICALRejetto HFS < 3.2.1 Session Forgery via Predictable Signing KeyEPSS 0.9%CVE-2022-23472MEDIUMUse of insecure random number generator in PasseoEPSS 0.8%CVE-2024-25389HIGHRT-Thread through 5.0.2 generates random numbers with a weak algorithm of "seed = 214013L * seed + 2531011L; return (seed >> 16) & 0x7FFF;" EPSS 0.8%CVE-2026-14495HIGHDoLogin Security <= 4.3 - Unauthenticated Authentication Bypass via Insufficient Randomness via 'dologin' Parameter Weak PRNG TokenEPSS 0.8%CVE-2025-3495CRITICALCOMMGR - Insufficient Randomization Authentication BypassEPSS 0.7%CVE-2022-44796CRITICALAn issue was discovered in Object First Ootbi BETA build 1.0.7.712. The authorization service has a flow that allows getting access to the WEPSS 0.7%CVE-2023-24828HIGHUse of Cryptographically Weak Pseudo-Random Number Generator in OnedevEPSS 0.7%CVE-2023-2884CRITICALInsecure Randomness in CBOT's ChatbotEPSS 0.7%CVE-2022-45782HIGHAn issue was discovered in dotCMS core 5.3.8.5 through 5.3.8.15 and 21.03 through 22.10.1. A cryptographically insecure random generation alEPSS 0.6%CVE-2025-22376MEDIUMIn Net::OAuth::Client in the Net::OAuth package before 0.29 for Perl, the default nonce is a 32-bit integer generated from the built-in randEPSS 0.6%CVE-2025-59390CRITICALApache Druid: Kerberos authenticaton chooses a cryptographically unsecure secret if not configured explicitly.EPSS 0.6%CVE-2026-93868CRITICALCotonti through 1.0.0 Predictable Password Recovery Token via Weak PRNGEPSS 0.6%CVE-2025-1796HIGHAdmin account takeover through weak Pseudo-Random number generator used in generating password reset codes in langgenius/difyEPSS 0.6%CVE-2025-40931CRITICALApache::Session::Generate::MD5 versions through 1.94 for Perl create insecure session idEPSS 0.6%CVE-2026-5088HIGHApache::API::Password versions through 0.5.2 for Perl can generate insecure random values for saltsEPSS 0.6%CVE-2024-34538HIGHMateso PasswordSafe through 8.13.9.26689 has Weak Cryptography.EPSS 0.6%CVE-2026-13577HIGHDancer2 versions before 2.2.0 for Perl generate insecure session ids when required CSPRNG modules are unavailableEPSS 0.6%CVE-2026-16235CRITICALCrypt::Password versions through 0.28 for Perl generate insecure random values for saltsEPSS 0.6%CVE-2025-68932LOWFreshRSS has weak cryptographic randomness in remember-me token and nonce generationEPSS 0.6%