Falhas do tipo CWE-338

165 resultados

Uso de gerador de números pseudoaleatórios criptograficamente fraco

A aplicação utiliza um PRNG (gerador de números pseudoaleatórios) inadequado para contextos de segurança, como Math.random() ou similar, onde deveria usar funções criptograficamente seguras. Isso permite que um atacante previsibilidade ou reproduza sequências de números que deveriam ser imprevisíveis, comprometendo tokens, chaves de sessão, nonces ou outros valores críticos.

Exemplo

Um sistema gera tokens de redefinição de senha usando Math.random() em vez de uma função criptográfica. Um atacante consegue prever ou enumerar tokens válidos dentro de um tempo útil, permitindo hijacking de contas.

Como mitigar

Substitua PRNGs genéricos por funções criptograficamente seguras: em Java use java.security.SecureRandom, em Node.js use crypto.randomBytes(), em Python use secrets ou os.urandom(). Revise todo código que gera valores de segurança e aplique essas funções.

CVE-2026-5083MEDIUMAdo::Sessions versions through 0.935 for Perl generates insecure session idsEPSS 0.4%CVE-2018-25107HIGHThe Crypt::Random::Source package before 0.13 for Perl has a fallback to the built-in rand() function, which is not a secure source of randoEPSS 0.4%CVE-2026-64798CRITICALJoomla Extension - regularlabs.com - Insecure login URL keys in IP login extensionEPSS 0.4%CVE-2026-53953CRITICALGetSimple CMS: Predictable Password Reset Password Allows Administrator Account TakeoverEPSS 0.4%CVE-2025-40916CRITICALMojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha textEPSS 0.4%CVE-2026-9692MEDIUMMojolicious::Sessions::Storable versions through 0.05 for Perl generate session ids insecurelyEPSS 0.4%CVE-2026-63089CRITICALWireGuard Easy Weak Token Generation Information Disclosure via OTL RouteEPSS 0.4%CVE-2025-69217HIGHCoturn has unsafe nonce and relay port randomization due to weak random number generation.EPSS 0.4%CVE-2025-40933HIGHApache::AuthAny::Cookie v0.201 or earlier for Perl generates session ids insecurelyEPSS 0.4%CVE-2022-41210MEDIUMSAP Customer Data Cloud (Gigya mobile app for Android) - version 7.4, uses insecure random number generator program which makes it easy for EPSS 0.4%CVE-2025-1828HIGHPerl's Crypt::Random module after 1.05 and before 1.56 may use rand() function for cryptographic functionsEPSS 0.4%CVE-2026-5082MEDIUMAmon2::Plugin::Web::CSRFDefender versions from 7.00 through 7.03 for Perl generate an insecure session idEPSS 0.4%CVE-2026-47372CRITICALCrypt::SaltedHash versions through 0.09 for Perl generate insecure random values for saltsEPSS 0.4%CVE-2026-44040MEDIUMUltraVNC vncauth.c uses time-seeded libc rand() to generate VNC authentication challenge bytesEPSS 0.4%CVE-2025-54883CRITICALVision UI's security-kit Contains Cryptographic WeaknessEPSS 0.4%CVE-2026-25726HIGHCloudreve is vulnerable to Account Takeover via Weak Cryptographic Token Generation (Insecure PRNG Seeding)EPSS 0.4%CVE-2024-56830MEDIUMThe Net::EasyTCP package 0.15 through 0.26 for Perl uses Perl's builtin rand() if no strong randomization module is present.EPSS 0.4%CVE-2025-40923HIGHPlack-Middleware-Session before version 0.35 for Perl generates session ids insecurelyEPSS 0.4%CVE-2026-112240MEDIUMBroken Access Control in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form)EPSS 0.4%CVE-2026-8169HIGHExtremeXOS Debug-Mode Privilege Escalation via Weak PRNGEPSS 0.4%