Falhas do tipo CWE-330

196 resultados

Uso de valores aleatórios insuficientemente seguros

A aplicação gera números ou tokens que deveriam ser imprevisíveis (senhas, chaves de sessão, tokens CSRF) usando um gerador de aleatório fraco ou previsível. Um atacante consegue adivinhar ou reproduzir esses valores, comprometendo autenticação, autorização ou criptografia.

Exemplo

Um sistema gera token de sessão com `Math.random()` ou `java.util.Random()` sem seed aleatória, ou usa `rand()` do C. Um atacante observa alguns tokens, identifica o padrão e falsifica novas sessões de outros usuários.

Como mitigar

Use geradores criptograficamente seguros: `java.security.SecureRandom`, `secrets` do Python, `crypto.getRandomValues()` do JavaScript, ou `/dev/urandom` em Linux. Nunca use `Math.random()`, `rand()` ou `java.util.Random()` para segurança. Gere valores com entropia suficiente (mínimo 128 bits para tokens).

CVE-2024-5149MEDIUMBuddyForms <= 2.8.9 - Email Verification Bypass due to Insufficient RandomnessEPSS 0.4%CVE-2026-19485CRITICALBucket Squatting in Vertex AI Search for CommerceEPSS 0.4%CVE-2026-18531MEDIUMIBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak HMAC Session SecretEPSS 0.4%CVE-2025-49198LOWPoor quality of randomness in authorization tokensEPSS 0.4%CVE-2025-10745MEDIUMBanhammer – Monitor Site Traffic, Block Bad Users and Bots <= 3.4.8 - Unauthenticated Protection Mechanism BypassEPSS 0.4%CVE-2026-42155CRITICALMagento LTS: Weak API Session ID — Predictable MD5 of Time-Derived InputsEPSS 0.4%CVE-2026-105786HIGHJoplin: Unauthenticated account takeover via an attacker-chosen application-authorisation identifierEPSS 0.4%CVE-2026-27515CRITICALBinardat 10G08-0800GSM Network Switch Predictable Session IdentifiersEPSS 0.4%CVE-2026-63149CRITICALOmnispace Agora Project < 26.10.0 Predictable Default Password via uniqid()EPSS 0.4%CVE-2026-86187HIGHWWBN AVideo Weak PRNG Password Generation via External LoginEPSS 0.4%CVE-2024-42165MEDIUMArbitrary User ActivationEPSS 0.4%CVE-2026-3416MEDIUMPredictable Pseudorandom Number Generation via Webhook HMAC Secret Generation in Multiple WSO2 Products Allows Forged Event PayloadsEPSS 0.4%CVE-2021-37186—A vulnerability has been identified in LOGO! CMR2020 (All versions < V2.2), LOGO! CMR2040 (All versions < V2.2), SIMATIC RTU3010C (All versiEPSS 0.4%CVE-2026-113071HIGHUse of insufficiently random values in Notifications in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spooEPSS 0.4%CVE-2026-71225MEDIUMLibkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundariesEPSS 0.3%CVE-2026-55889HIGHXDG Desktop Portal: Drag-and-drop and copy-paste theft via predictable FileTransfer keyEPSS 0.3%CVE-2023-20185HIGHA vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow aEPSS 0.3%CVE-2024-56089HIGHAn issue in Technitium through v13.2.2 enables attackers to conduct a DNS cache poisoning attack and inject fake responses by reviving the bEPSS 0.3%CVE-2024-50684MEDIUMSunGrow iSolarCloud Android app V2.1.6.20241017 and prior uses an insecure AES key to encrypt client data (insufficient entropy). This may aEPSS 0.3%CVE-2026-6719HIGHIBM Concert Software Use of Insufficiently Random ValuesEPSS 0.3%