CWE-326: Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- bitcoin coreIn Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it...7.5 High
- commscope tr4400 firmwareCommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an...9.8 Critical
- commscope tr4400 firmwareCommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an...9.8 Critical
- enigmail, fedoraproject fedora +1 moreIn Enigmail below 2.1, an attacker in possession of PGP encrypted emails can wrap them as sub...6.5 Medium
- dlink 6600-ap firmware, dwl-3600ap firmware +1 moreAn issue was discovered on D-Link 6600-AP and DWL-3600AP Ax 4.2.0.14 21/03/2019 devices. There is...7.8 High
- linux kernelThe Linux kernel 4.x (starting from 4.1) and 5.x before 5.0.8 allows Information Exposure ...7.5 High
- linux kernelIn the Linux kernel before 5.1.7, a device can be tracked by an attacker using the IP ID values...6.5 Medium
- dnnsoftware dotnetnuke, dotnetnuke (dnn) (dnn) +1 moreInadequate Encryption Strength in DotNetNuke7.5 High
- dnnsoftware dotnetnuke, dotnetnuke (dnn) (dnn) +1 moreInadequate Encryption Strength in DotNetNuke7.5 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.0 uses...5.9 Medium
- ibm security access managerIBM Security Access Manager 9.0.1 through 9.0.6 uses weaker than expected cryptographic...5.9 Medium
- tp-link tl-wr1043nd firmwareAn issue was discovered on TP-Link TL-WR1043ND V2 devices. The credentials can be easily decoded...7.5 High
- ibm api connectIBM API Connect 5.0.0.0 through 5.0.8.6 uses weaker than expected cryptographic algorithms that...5.9 Medium
- computrols building automation softwareComputrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if...7.5 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 11.7.8, 11.8.x before...7.5 High
- ibm rational engineering lifecycle managerIBM Rational Engineering Lifecycle Manager 6.0 through 6.0.6 uses weaker than expected...5.9 Medium
- ibm api connectIBM API Connect 2018.1 and 2018.4.1.2 uses weaker than expected cryptographic algorithms that...5.9 Medium
- ibm mq, websphere mq +1 moreIBM WebShere MQ 9.1.0.0, 9.1.0.1, 9.1.1 uses weaker than expected cryptographic algorithms that...5.9 Medium
- airsonic project airsonicAirsonic 10.2.1 uses Spring's default remember-me mechanism based on MD5, with a fixed key of...9.8 Critical
- ibm infosphere streams, streams +1 moreIBM InfoSphere Streams 4.2.1 uses weaker than expected cryptographic algorithms that could allow...5.9 Medium
- ivanti connect secure, pulsesecure pulse policy secure +1 moreSession data between cluster nodes during cluster synchronization is not properly encrypted in...9.8 Critical
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance supports...5.9 Medium
- seafileSeafile through 6.2.11 always uses the same Initialization Vector (IV) with Cipher Block Chaining...7.5 High
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow...5.9 Medium
- hotels server project servercontroller/fetchpwd.php and controller/doAction.php in Hotels_Server through 2018-11-05 rely on...7.5 High
- ibm security key lifecycle managerIBM Security Key Lifecycle Manager 3.0 through 3.0.0.2 uses weaker than expected cryptographic...5.9 Medium
- d-link dcs-825l firmware, dlink mydlink baby camera monitor +1 moreAn issue was discovered in D-Link 'myDlink Baby App' version 2.04.06. Whenever actions are...7.0 High
- ibm security access manager appliance, security access manager +1 moreIBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 uses weaker...5.9 Medium
- ibm datapower gatewayIBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 through 7.5.2.17, 7.5.1.0 through 7.5.1...5.9 Medium
- philips healthsuite health, healthsuite health android app +1 morePhilips HealthSuite Health Android App, all versions. The software uses simple encryption that is...4.3 Medium
- ibm qradar incident forensicsIBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow...7.5 High
- php-proxyWeak Cryptography in PHP-Proxy7.5 High
- pivotal software bits service, cloud foundry bits-service-release +1 moreSigning Key Extraction in Bits Service Release8.1 High
- ibm infosphere information server, infosphere information server on cloud +1 moreIBM InfoSphere Information Server 11.7 is affected by a weak password encryption vulnerability...6.2 Medium
- cisco digital network architecture center, digital network architecture center (dna center) +1 moreCisco Digital Network Architecture Center Authentication Bypass Vulnerability9.8 Critical
- ibm multi-cloud data encryptionIBM Multi-Cloud Data Encryption (MDE) 2.1 could allow an unauthorized user to manipulate data due...3.7 Low
- ibm spectrum protect, spectrum protect client, spectrum protect for virtual environments +2 moreIBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected...3.7 Low
- ibm spectrum protect, spectrum protect client, spectrum protect for virtual environments +2 moreIBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected...5.9 Medium
- neatorobotics botvac 85 firmware, botvac d3 connected firmware, botvac d4 connected firmware +3 more +5 moreAn issue was discovered on Neato Botvac Connected 2.2.0 and Botvac 85 1.2.1 devices. Static...2.4 Low
- cisco ios, ios xe, cisco systems, inc. ios and ios xe +2 moreA vulnerability in the implementation of RSA-encrypted nonces in Cisco IOS Software and Cisco IOS...5.9 Medium
- kaspersky lab zipato zipabox smart home controller, zipato zipabox firmware +1 moreWeak hashing algorithm in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version ...9.8 Critical
- ibm security identity governance and intelligenceIBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 uses weaker than expected...5.9 Medium
- beckhoff twincat, ics-cert beckhoff twincat +1 moreBeckhoff TwinCAT supports communication over ADS. ADS is a protocol for industrial automation in...9.1 Critical
- broadcom privileged access managerWeak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity...7.5 High
- bouncycastle bc-javaIn Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode7.4 High
- [unknown] jenkinsInadequate Encryption Strength in Jenkins4.3 Medium
- mozilla thunderbird, thunderbird esr, canonical ubuntu linux +8 more +10 moreUsing remote content in encrypted messages can lead to the disclosure of plaintext. This...7.5 High
- schneider electric se ampla mes, schneider-electric ampla manufacturing execution system +1 moreSchneider Electric Ampla MES 6.4 provides capability to configure users and their privileges....3.9 Low
- ibm san volume controller, spectrum virtualize, flashsystem v9000 +12 more +14 moreIBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products (6...5.3 Medium
- ibm security guardiumIBM Security Guardium 10.0, 10.0.1, and 10.1 through 10.1.4 uses weaker than expected...7.5 High
- Show moreLoading…