Falhas do tipo CWE-331

97 resultados

Entropia insuficiente em geração de números aleatórios

A fraqueza ocorre quando o software usa um gerador de números aleatórios ou pseudoaleatórios com entropia insuficiente para fins críticos de segurança, como gerar tokens, chaves criptográficas ou identificadores únicos. Um atacante consegue prever ou reproduzir esses valores, comprometendo toda a segurança que depende dessa aleatoriedade.

Exemplo

Uma aplicação usa Math.random() em JavaScript para gerar um token de sessão, ou confia em valores de /dev/urandom em uma máquina virtual com pouca entrada de entropia no boot. Em ambos os casos, um atacante consegue enumerar tokens válidos ou quebrar a criptografia que depende desses números.

Como mitigar

Use sempre geradores criptograficamente seguros apropriados para seu contexto: java.security.SecureRandom em Java, secrets.token_hex() em Python, crypto.getRandomBytes() em Node.js, ou /dev/urandom em sistemas Unix. Garanta que o sistema operacional coleta entropia suficiente (verifique /proc/sys/kernel/random/entropy_avail em Linux).

CVE-2023-46648HIGHInsufficient Entropy in GitHub Enterprise Server Management Console Invitation TokenEPSS 0.7%CVE-2020-29505HIGHDell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain a Key ManagemenEPSS 0.7%CVE-2024-3411CRITICALInsufficient Randomness When Validating an IPMI Authenticated SessionEPSS 0.7%CVE-2023-4344CRITICALBroadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connectionEPSS 0.7%CVE-2020-36925HIGHArteco Web Client DVR/NVR Session ID Brute Force Authentication BypassEPSS 0.7%CVE-2024-6508HIGHOpenshift-console: oauth2 insufficient state parameter entropyEPSS 0.7%CVE-2026-7210MEDIUMThe expat and elementtree parsers use insufficient entropy for XML hash-flooding protectionEPSS 0.7%CVE-2024-8796MEDIUMInsufficient Default OTP Shared Secret LengthEPSS 0.6%CVE-2025-47781CRITICALRallly Insufficient Password Login Token Entropy Leads to Account TakeoverEPSS 0.6%CVE-2024-25407HIGHSteVe v3.6.0 was discovered to use predictable transaction ID's when receiving a StartTransaction request. This vulnerability can allow attaEPSS 0.6%CVE-2026-11403HIGHNexus Repository Manager - Insufficient Entropy in Format-Specific API Key GenerationEPSS 0.5%CVE-2024-58134HIGHMojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as an HMAC session cookie secret by defaultEPSS 0.5%CVE-2017-2625MEDIUMIt was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a locEPSS 0.5%CVE-2025-67504CRITICALWBCE CMS has Weak Random Number Generator in Password Generation FunctionEPSS 0.5%CVE-2023-36610MEDIUM ​The affected TBox RTUs generate software security tokens using insufficient entropy. The random seed used to generate the software tokens EPSS 0.5%CVE-2026-13639CRITICALAn insufficient entropy vulnerability in login logic in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009EPSS 0.5%CVE-2025-52464CRITICALMeshtastic Repeated Public and Private KeypairsEPSS 0.5%CVE-2023-34973LOWQTS, QuTS heroEPSS 0.5%CVE-2025-66565CRITICALFiber Utils UUIDv4 and UUID Silent Fallback to Predictable ValuesEPSS 0.5%CVE-2026-38447CRITICALosTicket 1.18.3 generates API keys using a predictable construction based on MD5 hashing. The use of MD5, combined with predictable inputs sEPSS 0.5%