Falhas do tipo CWE-327

401 resultados

Uso de algoritmo criptográfico quebrado ou inseguro

A aplicação usa um algoritmo de criptografia que já foi criptanaliticamente quebrado ou é considerado inseguro para o caso de uso. Isso expõe dados sensíveis a decriptação não autorizada, mesmo que o código implemente corretamente a biblioteca criptográfica escolhida.

Exemplo

Um sistema de autenticação usa MD5 ou SHA1 para hash de senhas, ou uma API de pagamento trafega dados com DES ou RC4 em vez de AES. Um atacante consegue recuperar a senha original via força bruta ou quebra criptanalítica em tempo viável.

Como mitigar

Use apenas algoritmos criptográficos modernos e bem mantidos: SHA-256+ para hash, AES-256 para cifra simétrica, RSA-2048+ ou ECDP-256+ para assimétrica. Audite regularmente o stack criptográfico e mantenha dependências atualizadas; remova suporte a algoritmos legados em produção.

CVE-2025-68698HIGHJervis has an RSA PKCS#1 v1.5 Padding VulnerabilityEPSS 0.1%CVE-2025-37127HIGHAuthenticated Replay Attack contains Cryptographic VulnerabilityEPSS 0.1%CVE-2026-25834MEDIUMMbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade.EPSS 0.1%CVE-2023-41928MEDIUMRemote server offers deprecated TLS protocol in Kiloview P1/P2 devicesEPSS 0.1%CVE-2025-3838MEDIUMImproper Authorization in the installer for the EOL OVA based connect componentEPSS 0.1%CVE-2025-63912MEDIUMCohesity TranZman Migration Appliance Release 4.0 Build 14614 was discovered to use a weak cryptography algorithm for data encryption, allowEPSS 0.1%CVE-2023-41927MEDIUMWeak TLS Cipher Suites Supported in Kiloview P1/P2 devicesEPSS 0.1%CVE-2022-24403MEDIUMDe-anonymization attack in TETRAEPSS 0.1%CVE-2024-22458LOWDell Secure Connect Gateway, 5.18, contains an Inadequate Encryption Strength Vulnerability. An unauthenticated network attacker could potenEPSS 0.1%CVE-2025-45766HIGHpoco v1.14.1-release was discovered to contain weak encryption. NOTE: this issue has been disputed on the basis that key lengths are expecteEPSS 0.1%CVE-2025-2920LOWNetis WF-2404 passwd weak hashEPSS 0.1%CVE-2026-16693MEDIUMIBM i is Affected By Cryptographic Algorithm Weakness in DCM []EPSS 0.1%CVE-2026-40996MEDIUMInbound WS-Security allows RSA PKCS#1 v1.5 key transport by defaultEPSS 0.1%CVE-2025-26708MEDIUMZTELink has a configuration defect vulnerabilityEPSS 0.1%CVE-2026-24785HIGHClatter has a PSK Validity Rule Violation issueEPSS 0.1%CVE-2023-40371MEDIUMIBM AIX information disclosureEPSS 0.1%CVE-2025-59484HIGHAutomationDirect CLICK PLUS Use of a Broken or Risky Cryptographic AlgorithmEPSS 0.1%CVE-2024-41986MEDIUMA vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Audit (All versions >=EPSS 0.1%CVE-2023-35890MEDIUMIBM WebSphere Application Server information disclosureEPSS 0.1%CVE-2022-35720LOWIBM Sterling External Authentication Server information disclosureEPSS 0.1%