CWE-320: Key Management Errors
Weaknesses in this category are related to errors in the management of cryptographic keys.
From the CWE List. © The MITRE Corporation.
Newest
- perfree perfreeblogPerfreeBlog JWT JwtUtil hard-coded key6.3 Medium
- fastcms project fastcmsFastCMS JWT hard-coded key2.3 Low
- odyssey cms, odysseyautomation odyssey cms +1 moreOdyssey CMS reCAPTCHA odyssey_contact_form.php key management4.8 Medium
- mariazevedo88 travels-java-apimariazevedo88 travels-java-api JWT Secret JwtAuthenticationTokenFilter.java doFilterInternal hard-coded key2.3 Low
- milesight devicehubMileSight DeviceHub - CWE-320: Key Management Errors9.1 Critical
- qualcomm aqt1000 firmware, ar8035 firmware, csra6620 firmware +118 more +120 moreKey Management Errors in HLOS7.7 High
- qualcomm apq8009 firmware, apq8017 firmware, apq8037 firmware +183 more +185 moreImproper Authentication in HLOS.7.1 High
- amd 1st gen amd epyc™, 2nd gen amd epyc™, 3rd gen amd epyc™ +57 more +59 morePersistent platform private key may not be protected with a random IV leading to a potential “two...7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX and NFX Series: Insufficient Web API private key protection6.5 Medium
- cisco hyperflex hx-series, hyperflex hx220c af m5 firmware, hyperflex hx220c edge m5 firmware +3 more +5 moreCisco HyperFlex Static SSL Key Vulnerability6.8 Medium
- mailvelopeMailvelope prior to 3.3.0 does not require user interaction to import public keys shown on web...5.3 Medium
- cisco application policy infrastructure controller, application policy infrastructure controller (apic) +1 moreCisco Application Policy Infrastructure Controller Recoverable Encryption Key Vulnerability4.6 Medium
- canonical jujuJuju Joyent provider uploads user's private ssh key by default6.4 Medium
- nvidia jetson tx1 and tx2, jetson tx1, jetson tx2 +2 moreNVIDIA Jetson TX1 and TX2 contain a vulnerability in the Linux for Tegra (L4T) operating system ...9.1 Critical
- putty, debian linux, fedoraproject fedora +2 more +4 moreA remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before...7.5 High
- botan project botanA side-channel issue was discovered in Botan before 2.9.0. An attacker capable of precisely...5.9 Medium
- apple mac os xIn macOS High Sierra before 10.13.2, a logic issue existed in APFS when deleting keys during...7.5 High
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +33 more +35 moreCryptographic key material leaked in TDSCDMA RRC debug messages in snapdragon automobile,...5.5 Medium
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +28 more +30 moreInformation leak in UIM API debug messages in snapdragon mobile and snapdragon wear in versions...5.5 Medium
- cisco adaptive security appliance (asa) software, adaptive security appliance software, secure firewall management center +2 moreCisco Adaptive Security Appliance IPsec VPN Denial of Service Vulnerability6.8 Medium
- libsunec project libsunecThe Elliptic Curve Cryptography library (aka sunec or libsunec) allows a memory-cache side...4.9 Medium
- cryptlib** DISPUTED ** cryptlib through 3.4.4 allows a memory-cache side-channel attack on DSA and ECDSA...4.9 Medium
- opcfoundation ua-.net-legacy, ua-.netstandard +1 moreOPC UA applications can allow a remote attacker to determine a Server's private key5.3 Medium
- openssl, canonical ubuntu linux, debian linux +1 more +3 moreClient DoS due to large DH parameter7.5 High
- bouncycastle bc-java, debian linux +1 moreIn Bouncy Castle JCE Provider the other party DH public key is not fully validated3.7 Low
- unisys stealth authorization serverIn Stealth Authorization Server before 3.3.017.0 in Unisys Stealth Solution, an encryption key...4.7 Medium
- redhat ansibleAnsible fails to cache SSH host keys7.4 High
- qualcomm sd 205 firmware, sd 210 firmware, sd 212 firmware +14 more +16 moreIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile...9.8 Critical
- qualcomm mdm9206 firmware, mdm9607 firmware, mdm9615 firmware +32 more +34 moreIn Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and...9.8 Critical
- dlink dir-815 firmwareD-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive...7.5 High
- gnupg, canonical ubuntu linux +1 moreGnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an...7.5 High
- cisco unified communications domain managerA vulnerability in Cisco Unified Communications Domain Manager could allow an unauthenticated,...9.8 Critical
- x.org libxdmcp, redhat enterprise linux, enterprise linux desktop +4 more +6 moreIt was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys...6.5 Medium
- red hat ansibleAnsible apt_key module does not properly verify key fingerprint6.3 Medium
- ceragon fibeair ip-10 firmwareCeragon FibeAir IP-10 have a default SSH public key in the authorized_keys file for the mateidu...9.8 Critical
- botan project botanThe X509_Certificate::allowed_usage function in botan 1.11.x before 1.11.31 might allow attackers...7.5 High
- cloudera key trustee serverCloudera Key Trustee Server before 5.4.3 does not store keys synchronously, which might allow...9.8 Critical
- matrixsslMatrixSSL before 3.8.7, when the DHE_RSA based cipher suite is supported, makes it easier for...5.9 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar 7.2 stores the encryption key used to encrypt the service account password which can...7.8 High
- matrixsslThe pstm_reverse function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of...7.5 High
- openbsd opensshauthfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on...5.5 Medium
- openssl, canonical ubuntu linux, debian linux +1 more +3 moreA timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user...5.5 Medium
- exim, canonical ubuntu linux, debian linux +2 moreExim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via...5.9 Medium
- open-xchange ox guardAn issue was discovered in Open-Xchange Guard before 2.2.0-rev8. The "getprivkeybyid" API call is...8.8 High
- mozilla nss, network security services, redhat enterprise linux desktop +5 more +7 moreIt was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to...5.3 Medium
- zend frameworkZend Framework Information Disclosure7.5 High
- dest-unreach socatThe OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for...5.3 Medium
- hp linux imaging and printingThe hp-plugin utility in HP Linux Imaging and Printing (HPLIP) makes it easier for man-in-the...8.1 High
- oleumtech sensor wireless i/o modules, wio dh2 wireless gateway, sensor wireless i\/o module +2 moreOleumTech WIO Family Key Management Errors7.2