CWE-310: Cryptographic Issues
Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.
From the CWE List. © The MITRE Corporation.
Newest
- linecorp lineLINE 3.2.1.83 and earlier on Windows and 3.2.1 and earlier on OS X does not verify X.509...4.3 Medium
- cyberagent amebaThe CyberAgent Ameba application 3.x and 4.x before 4.5.0 for Android does not verify X.509...5.8 Medium
- microsoft outlook.comThe Microsoft Outlook.com application before 7.8.2.12.49.7090 for Android does not verify X.509...4.0 Medium
- cisco webex meetings serveruser.php in Cisco WebEx Meetings Server 1.5(.1.131) and earlier does not properly implement the...5.8 Medium
- sap hana extended application servicesSAP HANA Extend Application Services (XS) does not encrypt transmissions for applications that...2.9 Low
- zarafa webapp, zarafa, fedoraproject fedora +2 moreWebAccess in Zarafa before 7.1.10 and WebApp before 1.6 stores credentials in cleartext, which...2.1 Low
- polarssl, debian linux +1 moreThe ssl_decrypt_buf function in library/ssl_tls.c in PolarSSL before 1.2.11 and 1.3.x before 1.3...5.0 Medium
- apache syncopeApache Syncope uses a weak PNRG5.0 Medium
- apache cxf, redhat jboss enterprise application platform +1 moreCleartext Transmission of Sensitive Information in Apache CXF4.3 Medium
- ibm algo credit limits, algorithmics +1 moreThe decrypt function in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7...4.3 Medium
- ibm algo credit limits, algorithmics +1 moreRICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM...4.3 Medium
- ibm advanced management module, integrated management module, integrated management module ii +3 more +5 moreThe firmware before 3.66E in IBM BladeCenter Advanced Management Module (AMM), the firmware...5.0 Medium
- apple iphone osMail in Apple iOS before 7.1.2 advertises the availability of data protection for attachments but...2.1 Low
- jreast jr east japanThe East Japan Railway Company JR East Japan application before 1.2.0 for Android does not verify...5.8 Medium
- dell bsafe shareThe TLS implementation in EMC RSA BSAFE-Java Toolkits (aka Share for Java) supports the Extended...5.0 Medium
- dell bsafe shareThe Dual_EC_DRBG implementation in EMC RSA BSAFE-C Toolkits (aka Share for C and C++) processes...5.0 Medium
- dell bsafe shareThe TLS implementation in EMC RSA BSAFE-C Toolkits (aka Share for C and C++) sends a long series...5.0 Medium
- powerpc-utils project powerpc-utilssnap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially...5.0 Medium
- emc rsa bsafe toolkits, rsa data protection manager +1 moreThe default configuration of EMC RSA BSAFE Toolkits and RSA Data Protection Manager (DPM)...5.8 Medium
- juniper ive os, fips infranet controller 6500, fips secure access 4000 +15 more +17 moreThe Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS before 7.4r5 and 8.x...5.0 Medium
- microsoft internet explorerSChannel in Microsoft Internet Explorer 6 through 11 does not ensure that a server's X.509...6.8 Medium
- microsoft windows 7, windows 8, windows 8.1 +1 more +3 moreThe Remote Desktop Protocol (RDP) implementation in Microsoft Windows 7 SP1, Windows 8, Windows 8...5.1 Medium
- gordon heydon secure pagesThe Secure Pages module 6.x-2.x before 6.x-2.0 for Drupal does not properly match URLs, which...4.3 Medium
- ibm security appscan sourceIBM Security AppScan Source 8.0 through 9.0, when the publish-assessment permission is not...4.3 Medium
- apereo phpcasphpCAS before 1.3.2 does not verify that the server hostname matches a domain name in the subject...5.8 Medium
- owncloud, owncloud server +1 moreThe installation routine in ownCloud Server before 4.0.14, 4.5.x before 4.5.9, and 5.0.x before 5...5.0 Medium
- gnu gnutlsGnuTLS before 3.1.0 does not verify that the RSA PKCS #1 signature algorithm matches the...5.0 Medium
- redhat openstackOpenStack Heat Templates (heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform...4.3 Medium
- redhat openstackOpenStack Heat Templates (heat-templates), as used in Red Hat Enterprise Linux OpenStack Platform...4.3 Medium
- redhat rhevm-reportsThe setup script in ovirt-engine-reports, as used in the Red Hat Enterprise Virtualization...2.1 Low
- openbsd opensmtpdOpenSMTPD before 5.3.2 does not properly handle SSL sessions, which allows remote attackers to...5.0 Medium
- github hubHub Package Arbitrary File Overwrite3.6 Low
- paul mattes x3270x3270 before 3.3.12ga12 does not verify that the server hostname matches a domain name in the...5.8 Medium
- cisco telepresence system softwareCisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS...4.3 Medium
- apache cloudstack, citrix cloudplatform +1 moreApache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x...5.0 Medium
- isync project isyncIsync 0.4 before 1.0.6, does not verify that the server hostname matches a domain name in the...4.3 Medium
- urbanairship python-oauth2SimpleGeo python-oauth2 does not check the nonce allowing replay attacks4.3 Medium
- livezillaLiveZilla 5.1.2.1 and earlier includes the MD5 hash of the operator password in plaintext in...6.8 Medium
- python, apple mac os x +1 morePython 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which...4.3 Medium
- livezillaLiveZilla before 5.1.2.1 includes the operator password in plaintext in Javascript code that is...4.3 Medium
- opentext exceed ondemandOpenText Exceed OnDemand (EoD) 8 transmits the session ID in cleartext, which allows remote...6.4 Medium
- opentext exceed ondemandThe client in OpenText Exceed OnDemand (EoD) 8 supports anonymous ciphers by default, which...6.8 Medium
- opentext exceed ondemandOpenText Exceed OnDemand (EoD) 8 uses weak encryption for passwords, which makes it easier for (1...5.0 Medium
- bilyonerThe Bilyoner application before 2.3.1 for Android and before 4.6.2 for iOS does not verify X.509...5.8 Medium
- broadcom pipa c211, pipa c211 web interface +1 morecgi-bin/rpcBridge in the web interface 1.1 on Broadcom Ltd PIPA C211 rev2 does not properly...9.7 High
- google androidAndroid OS before 2.2 does not display the correct SSL certificate in certain cases, which might...4.3 Medium
- theforeman foremanForeman before 1.1 uses a salt of "foreman" to hash root passwords, which makes it easier for...5.0 Medium
- cristian gafton pam userdbThe pam_userdb module for Pam uses a case-insensitive method to compare hashed passwords, which...4.3 Medium
- redhat openshiftopenshift-origin-broker-util, as used in Red Hat OpenShift Enterprise 1.2.7 and 2.0.5, uses world...2.1 Low
- virt-who project virt-who, redhat enterprise linux desktop, enterprise linux server +1 more +3 morevirt-who uses world-readable permissions for /etc/sysconfig/virt-who, which allows local users to...2.1 Low
- Show moreLoading…