Falhas do tipo CWE-338

154 resultados

Uso de gerador de números pseudoaleatórios criptograficamente fraco

A aplicação utiliza um PRNG (gerador de números pseudoaleatórios) inadequado para contextos de segurança, como Math.random() ou similar, onde deveria usar funções criptograficamente seguras. Isso permite que um atacante previsibilidade ou reproduza sequências de números que deveriam ser imprevisíveis, comprometendo tokens, chaves de sessão, nonces ou outros valores críticos.

Exemplo

Um sistema gera tokens de redefinição de senha usando Math.random() em vez de uma função criptográfica. Um atacante consegue prever ou enumerar tokens válidos dentro de um tempo útil, permitindo hijacking de contas.

Como mitigar

Substitua PRNGs genéricos por funções criptograficamente seguras: em Java use java.security.SecureRandom, em Node.js use crypto.randomBytes(), em Python use secrets ou os.urandom(). Revise todo código que gera valores de segurança e aplique essas funções.

CVE-2024-23660HIGHThe Binance Trust Wallet app for iOS in commit 3cd6e8f647fbba8b5d8844fcd144365a086b629f, git tag 0.0.4 misuses the trezor-crypto library andEPSS 0.6%CVE-2024-45751MEDIUMtgt (aka Linux target framework) before 1.0.93 attempts to achieve entropy by calling rand without srand. The PRNG seed is always 1, and thuEPSS 0.6%CVE-2023-32549MEDIUMLandscape insecure token generationEPSS 0.5%CVE-2024-58135MEDIUMMojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by defaultEPSS 0.5%CVE-2023-28835LOWInsecure randomness for default password in nextcloudEPSS 0.5%CVE-2026-3256CRITICALHTTP::Session versions before 0.54 for Perl defaults to using insecurely generated session idsEPSS 0.5%CVE-2026-56141CRITICALIn JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 account takeover via predictEPSS 0.5%CVE-2026-9733CRITICALMojolicious::Plugin::Web::Auth::OAuth2 versions through 0.17 for Perl have an insecure default state parameterEPSS 0.5%CVE-2026-92749CRITICALSafeLine through 9.4.1 Authentication Bypass via Weak Session SecretEPSS 0.5%CVE-2025-15604CRITICALAmon2 versions before 6.17 for Perl use an insecure random_string implementation for security functionsEPSS 0.5%CVE-2025-67504CRITICALWBCE CMS has Weak Random Number Generator in Password Generation FunctionEPSS 0.5%CVE-2026-56016MEDIUMCGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sourcesEPSS 0.5%CVE-2025-66630CRITICALFiber insecurely fallsback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failureEPSS 0.5%CVE-2026-4599CRITICALVersions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Factors via the getRandoEPSS 0.5%CVE-2023-50059MEDIUMAn issue ingalxe.com Galxe platform 1.0 allows a remote attacker to obtain sensitive information via the Web3 authentication process of GalxEPSS 0.5%CVE-2025-32754CRITICALIn jenkins/ssh-agent Docker images 6.11.1 and earlier, SSH host keys are generated on image creation for images based on Debian, causing allEPSS 0.5%CVE-2025-32755CRITICALIn jenkins/ssh-slave Docker images based on Debian, SSH host keys are generated on image creation for images based on Debian, causing all coEPSS 0.5%CVE-2025-66565CRITICALFiber Utils UUIDv4 and UUID Silent Fallback to Predictable ValuesEPSS 0.5%CVE-2025-21617MEDIUMGuzzle OAuth Subscriber has insufficient nonce entropyEPSS 0.5%CVE-2025-1805MEDIUMCrypt::Salt for Perl uses insecure rand() function when generating salts for cryptographic purposesEPSS 0.5%