Falhas do tipo CWE-330

178 resultados

Uso de valores aleatórios insuficientemente seguros

A aplicação gera números ou tokens que deveriam ser imprevisíveis (senhas, chaves de sessão, tokens CSRF) usando um gerador de aleatório fraco ou previsível. Um atacante consegue adivinhar ou reproduzir esses valores, comprometendo autenticação, autorização ou criptografia.

Exemplo

Um sistema gera token de sessão com `Math.random()` ou `java.util.Random()` sem seed aleatória, ou usa `rand()` do C. Um atacante observa alguns tokens, identifica o padrão e falsifica novas sessões de outros usuários.

Como mitigar

Use geradores criptograficamente seguros: `java.security.SecureRandom`, `secrets` do Python, `crypto.getRandomValues()` do JavaScript, ou `/dev/urandom` em Linux. Nunca use `Math.random()`, `rand()` ou `java.util.Random()` para segurança. Gere valores com entropia suficiente (mínimo 128 bits para tokens).

CVE-2026-27755CRITICALSODOLA SL902-SWTGW124AS <= 200.1.20 Predictable Session IDEPSS 0.4%CVE-2025-6515MEDIUMReuse of session IDs in oatpp-mcp leads to session hijacking and prompt hijacking by remote attackersEPSS 0.4%CVE-2026-2966MEDIUMCesanta Mongoose DNS Transaction ID dns.c mg_sendnsreq random valuesEPSS 0.4%CVE-2025-43866LOWVantage6 Server JWT secret not cryptographically secureEPSS 0.4%CVE-2023-22912MEDIUMAn issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. CheckUser TokenManager inEPSS 0.4%CVE-2024-35292HIGHA vulnerability has been identified in SIMATIC S7-200 SMART CPU CR40 (6ES7288-1CR40-0AA0) (All versions), SIMATIC S7-200 SMART CPU CR60 (6ESEPSS 0.4%CVE-2024-5149MEDIUMBuddyForms <= 2.8.9 - Email Verification Bypass due to Insufficient RandomnessEPSS 0.4%CVE-2025-49198LOWPoor quality of randomness in authorization tokensEPSS 0.4%CVE-2025-10745MEDIUMBanhammer – Monitor Site Traffic, Block Bad Users and Bots <= 3.4.8 - Unauthenticated Protection Mechanism BypassEPSS 0.4%CVE-2024-42165MEDIUMArbitrary User ActivationEPSS 0.4%CVE-2021-37186—A vulnerability has been identified in LOGO! CMR2020 (All versions < V2.2), LOGO! CMR2040 (All versions < V2.2), SIMATIC RTU3010C (All versiEPSS 0.4%CVE-2026-20101HIGHA vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unEPSS 0.4%CVE-2023-20185HIGHA vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow aEPSS 0.3%CVE-2022-31008MEDIUMPredictable credential obfuscation seed value used in rabbitmq-serverEPSS 0.3%CVE-2024-50684MEDIUMSunGrow iSolarCloud Android app V2.1.6.20241017 and prior uses an insecure AES key to encrypt client data (insufficient entropy). This may aEPSS 0.3%CVE-2026-71225MEDIUMLibkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundariesEPSS 0.3%CVE-2023-1385HIGHImproper JPAKE implementation allows offline PIN brute-forcing due to the initialization of random values to a known value, which leads to uEPSS 0.3%CVE-2026-19906MEDIUMpkp pkp-lib API Key Generation APIProfileForm.php setData entropyEPSS 0.3%CVE-2026-27515CRITICALBinardat 10G08-0800GSM Network Switch Predictable Session IdentifiersEPSS 0.3%CVE-2024-56089HIGHAn issue in Technitium through v13.2.2 enables attackers to conduct a DNS cache poisoning attack and inject fake responses by reviving the bEPSS 0.3%