Falhas do tipo CWE-330

196 resultados

Uso de valores aleatórios insuficientemente seguros

A aplicação gera números ou tokens que deveriam ser imprevisíveis (senhas, chaves de sessão, tokens CSRF) usando um gerador de aleatório fraco ou previsível. Um atacante consegue adivinhar ou reproduzir esses valores, comprometendo autenticação, autorização ou criptografia.

Exemplo

Um sistema gera token de sessão com `Math.random()` ou `java.util.Random()` sem seed aleatória, ou usa `rand()` do C. Um atacante observa alguns tokens, identifica o padrão e falsifica novas sessões de outros usuários.

Como mitigar

Use geradores criptograficamente seguros: `java.security.SecureRandom`, `secrets` do Python, `crypto.getRandomValues()` do JavaScript, ou `/dev/urandom` em Linux. Nunca use `Math.random()`, `rand()` ou `java.util.Random()` para segurança. Gere valores com entropia suficiente (mínimo 128 bits para tokens).

CVE-2019-25089LOWMorgawr Muon handler.clj random valuesEPSS 0.7%CVE-2023-22746HIGHCKAN is vulnerable to session secret shared across instances using Docker imagesEPSS 0.7%CVE-2023-2884CRITICALInsecure Randomness in CBOT's ChatbotEPSS 0.7%CVE-2024-21495MEDIUMVersions of the package github.com/greenpau/caddy-security before 1.0.42 are vulnerable to Insecure Randomness due to using an insecure randEPSS 0.7%CVE-2024-20331MEDIUMCisco Adaptive Security Appliance and Firepower Threat Defense Software VPN Authentication DoS VulnerabilityEPSS 0.7%CVE-2023-3803LOWChengdu Flash Flood Disaster Monitoring and Warning System File Name ImageStationDataService.asmx random valuesEPSS 0.7%CVE-2026-19407HIGHGCS Bucket Squatting leading to RCE in Gemini Enterprise Agent Platform Python SDKEPSS 0.7%CVE-2026-82555MEDIUMTOTOLINK N600R Authentication cstecgi.cgi loginAuth random valuesEPSS 0.7%CVE-2024-25943HIGHiDRAC9, versions prior to 7.00.00.172 for 14th Generation and 7.10.50.00 for 15th and 16th Generations, contains a session hijacking vulneraEPSS 0.7%CVE-2022-44795MEDIUMAn issue was discovered in Object First Ootbi BETA build 1.0.7.712. A flaw was found in the Web Service, which could lead to local informatiEPSS 0.6%CVE-2026-66391MEDIUMApache Wicket: leaked and missing CSP headersEPSS 0.6%CVE-2018-13280HIGHUse of insufficiently random values vulnerability in SYNO.Encryption.GenRandomKey in Synology DiskStation Manager (DSM) before 6.2-23739 allEPSS 0.6%CVE-2026-80154HIGHLantronix Autonomous Out-of-Band Devices Predictable Session Token with Validation BypassEPSS 0.6%CVE-2024-52615MEDIUMAvahi: avahi wide-area dns uses constant source portEPSS 0.6%CVE-2022-29035LOWIn JetBrains Ktor Native before version 2.0.0 random values used for nonce generation weren't using SecureRandom implementationsEPSS 0.6%CVE-2025-59371HIGHAn authentication bypass vulnerability has been identified in the IFTTT integration feature. A remote, authenticated attacker could leverageEPSS 0.6%CVE-2025-5136MEDIUMTmall Demo Payment Identifier pay random valuesEPSS 0.6%CVE-2025-4607CRITICALPSW Front-end Login & Registration <= 1.12 - Insufficiently Random Values to Unauthenticated Account Takeover/Privilege Escalation via customer_registration FunctionEPSS 0.6%CVE-2023-22601CRITICAL InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerEPSS 0.6%CVE-2022-43501CRITICALKASAGO TCP/IP stack provided by Zuken Elmic generates ISNs(Initial Sequence Number) for TCP connections from an insufficiently random sourceEPSS 0.6%