Fallos del tipo CWE-338

169 resultados

Uso de gerador de números pseudoaleatórios criptograficamente fraco

A aplicação utiliza funções de geração de números aleatórios (como Math.random(), rand() ou similar) que não são adequadas para fins criptográficos, permitindo que um atacante preveja ou reproduza os valores gerados. Isso compromete a segurança de operações sensíveis como geração de tokens, chaves de sessão, nonces e valores criptográficos.

Ejemplo

Um servidor web gera tokens de autenticação usando Math.random() em JavaScript ou rand() em C. Um atacante observa alguns tokens válidos, consegue adivinhar o padrão ou seed do gerador e forja um token válido para sequestrar sessões de outros usuários.

Cómo mitigar

Utilize geradores de números aleatórios criptograficamente seguros: crypto.getRandomValues() em JavaScript/navegadores, SecureRandom em Java, secrets em Python, ou /dev/urandom em sistemas Unix. Nunca use funções de propósito geral (Math.random, rand) para operações criptográficas ou de segurança.

CVE-2025-32755CRITICALIn jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation for images based on Debian, causing all coEPSS 0.5%CVE-2026-4599CRITICALVersions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Factors via the getRandoEPSS 0.5%CVE-2025-21617MEDIUMGuzzle OAuth Subscriber has insufficient nonce entropyEPSS 0.5%CVE-2025-1805MEDIUMCrypt::Salt for Perl uses insecure rand() function when generating salts for cryptographic purposesEPSS 0.5%CVE-2023-50059MEDIUMAn issue ingalxe.com Galxe platform 1.0 allows a remote attacker to obtain sensitive information via the Web3 authentication process of GalxEPSS 0.5%CVE-2024-58041CRITICALSmolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functionsEPSS 0.5%CVE-2025-40920HIGHCatalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl use insecurely generated noncesEPSS 0.5%CVE-2026-2439CRITICALConcierge::Sessions versions from 0.8.1 before 0.8.5 for Perl generate insecure session idsEPSS 0.5%CVE-2025-66565CRITICALFiber Utils UUIDv4 and UUID Silent Fallback to Predictable ValuesEPSS 0.5%CVE-2026-3255MEDIUMHTTP::Session2 versions before 1.12 for Perl may generate weak session ids using the rand() functionEPSS 0.5%CVE-2025-40918MEDIUMAuthen::SASL::Perl::DIGEST_MD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurelyEPSS 0.5%CVE-2021-3047MEDIUMPAN-OS: Weak Cryptography Used in Web Interface AuthenticationEPSS 0.5%CVE-2024-57854CRITICALNet::NSCA::Client versions through 0.009002 for Perl uses a poor random number generatorEPSS 0.5%CVE-2026-6659HIGHCrypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for saltsEPSS 0.4%CVE-2025-46653LOWFormidable (aka node-formidable) 2.1.0 through 3.x before 3.5.3 relies on hexoid to prevent guessing of filenames for untrusted executable cEPSS 0.4%CVE-2026-5083MEDIUMAdo::Sessions versions through 0.935 for Perl generates insecure session idsEPSS 0.4%CVE-2026-73567CRITICALsm-crypto: Predictable SM2 key generation in Node.js: default RNG uses Math.random + wall clockEPSS 0.4%CVE-2026-74874HIGHopenssl_encrypt before 1.4.0 Weak PRNG Steganography Pixel SelectionEPSS 0.4%CVE-2026-16615MEDIUMLibrest: weak random number generation in pkce implementationEPSS 0.4%CVE-2026-41564HIGHCryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forkingEPSS 0.4%