Falhas do tipo CWE-330

196 resultados

Uso de valores aleatórios insuficientemente seguros

A aplicação gera números ou tokens que deveriam ser imprevisíveis (senhas, chaves de sessão, tokens CSRF) usando um gerador de aleatório fraco ou previsível. Um atacante consegue adivinhar ou reproduzir esses valores, comprometendo autenticação, autorização ou criptografia.

Exemplo

Um sistema gera token de sessão com `Math.random()` ou `java.util.Random()` sem seed aleatória, ou usa `rand()` do C. Um atacante observa alguns tokens, identifica o padrão e falsifica novas sessões de outros usuários.

Como mitigar

Use geradores criptograficamente seguros: `java.security.SecureRandom`, `secrets` do Python, `crypto.getRandomValues()` do JavaScript, ou `/dev/urandom` em Linux. Nunca use `Math.random()`, `rand()` ou `java.util.Random()` para segurança. Gere valores com entropia suficiente (mínimo 128 bits para tokens).

CVE-2018-18602CRITICALThe Cloud API on Guardzilla smart cameras allows user enumeration, with resultant arbitrary camera access and monitoring.EPSS 1.4%CVE-2013-4734HIGHdasdec_mkuser on the Digital Alert Systems DASDEC EAS device before 2.0-2 and the Monroe Electronics R189 One-Net EAS device before 2.0-2 geEPSS 1.4%CVE-2022-36045CRITICALAccount takeover via cryptographically weak PRNG in NodeBB ForumEPSS 1.3%CVE-2017-16028—react-native-meteor-oauth is a library for Oauth2 login to a Meteor server in React Native. The oauth Random Token is generated using a non-EPSS 1.3%CVE-2023-41879HIGHMagento LTS's guest order "protect code" can be brute-forced too easilyEPSS 1.3%CVE-2022-38970MEDIUMieGeek IG20 hipcam RealServer V1.0 is vulnerable to Incorrect Access Control. The algorithm used to generate device IDs (UIDs) for devices tEPSS 1.2%CVE-2023-34353HIGHAn authentication bypass vulnerability exists in the OAS Engine authentication functionality of Open Automation Software OAS Platform v18.00EPSS 1.2%CVE-2023-26451HIGHFunctions with insufficient randomness were used to generate authorization tokens of the integrated oAuth Authorization Service. AuthorizatiEPSS 1.2%CVE-2022-26647HIGHA vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE EPSS 1.2%CVE-2022-3959LOWdrogon Session Hash small space of random valuesEPSS 1.1%CVE-2020-35163MEDIUMDell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain a Use of InsufficEPSS 1.1%CVE-2022-26071HIGHOn F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior EPSS 1.1%CVE-2022-46353CRITICALA vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALAEPSS 1.1%CVE-2021-25677MEDIUMA vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions <EPSS 1.1%CVE-2023-6376MEDIUMHenschen & Associates court document management software cache uses predictable file namesEPSS 1.1%CVE-2024-0761HIGHFile Manager <= 7.2.1 - Sensitive Information Exposure via Backup FilenamesEPSS 1.0%CVE-2022-44938CRITICALWeak reset token generation in SeedDMS v6.0.20 and v5.1.7 allows attackers to execute a full account takeover via a brute force attack.EPSS 1.0%CVE-2022-37400—Apache OpenOffice Static Initialization Vector Allows to Recover Passwords for Web Connections Without Knowing the Master PasswordEPSS 1.0%CVE-2022-31034HIGHInsecure entropy in argo-cdEPSS 1.0%CVE-2021-29499HIGHPredictable SIF UUID IdentifiersEPSS 1.0%