CWE-326: Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.4, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5...9.1 Critical
- b&r automation studioIncomplete communication encryption and validation in B&R Automation Studio upgrade service6.5 Medium
- zoom meetingsairhost.exe in Zoom Client for Meetings 4.6.11 uses 3423423432325249 as the Initialization Vector...7.5 High
- google androidAn issue was discovered on LG mobile devices with Android OS 9.0 (Qualcomm SDM450, SDM845, SM6150...5.5 Medium
- mitel mivoice connect clientA weak encryption vulnerability in Mitel MiVoice Connect Client before 214.100.1214.0 could allow...9.8 Critical
- google androidAn issue was discovered on Samsung mobile devices with N(7.x) software. A physically proximate...4.6 Medium
- google androidAn issue was discovered on Samsung mobile devices with M(6.0) software. The S/MIME implementation...7.5 High
- visam vbase editor, vbase web-remote module, vbase web-remote +2 moreVISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and...7.8 High
- abb esomsABB eSOMS: SSL medium strength Cipher Suites5.9 Medium
- apple ios, ipados, iphone os +2 moreA logic issue was addressed with improved state management. This issue is fixed in iOS 13.4 and...6.5 Medium
- avast antivirusAn issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx...7.5 High
- f5 big-ip, big-iq, big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreOn BIG-IP 15.0.0-15.1.0.2, 14.1.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5.1, and 11.5.2-11.6.5.1...8.1 High
- onap open network automation platformAn issue was detected in ONAP Portal through Dublin. By executing a padding oracle attack using...7.5 High
- red hat wildfly, redhat jboss data grid, jboss enterprise application platform +3 more +5 moreInadequate Encryption Strength and Algorithm Downgrade in Wildfly7.4 High
- siemens sinvr/sivms video server, sinvr\/sivms video server +1 moreA vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR...7.5 High
- jpaseto project jpasetoJPaseto before 0.3.0 generates weak hashes when using v2.local tokens.7.5 High
- commscope arris tg1692a firmwareARRIS TG1692A devices allow remote attackers to discover the administrator login name and...7.5 High
- unctad asycuda worldAn issue was discovered in UNCTAD ASYCUDA World 2001 through 2020. The Java RMI Server has an...9.8 Critical
- mitel 6863i firmware, 6865i firmware, 6867i firmware +5 more +7 moreA key length vulnerability in the implementation of the SRTP 128-bit key on Mitel 6800 and 6900...5.9 Medium
- juniper junosJunos: FTPS through SRX opens up wide range of data channel TCP ports6.5 Medium
- golfbuddyglobal course managerIn GolfBuddy Course Manager 1.1, passwords are sent (with base64 encoding) via a GET request.6.5 Medium
- ibm qradar advisorIBM Qradar Advisor 1.1 through 2.5 with Watson uses weaker than expected cryptographic algorithms...5.9 Medium
- mobileiron sentry, virtual smartphone platform +1 moreMobileIron VSP < 5.9.1 and Sentry < 5.0 has an insecure encryption scheme.9.8 Critical
- att mobileiron sentry, mobileiron virtual smartphone platform +1 moreMobileIron VSP < 5.9.1 and Sentry < 5.0 has a weak password obfuscation algorithm7.5 High
- fujitsu interstage application development cycle manager, interstage application server, interstage business application manager +37 more +39 moreThe Fujitsu TLS library allows a man-in-the-middle attack. This affects Interstage Application...5.9 Medium
- joomla! core, joomla joomla\! +1 moreJoomla! core 1.7.1 allows information disclosure due to weak encryption7.5 High
- django-user-sessions project django-user-sessionsSession key exposure through session list in Django User Sessions6.5 Medium
- gehealthcare apexpro telemetry server firmware, carescape central station mai700 firmware, carescape central station mas700 firmware +3 more +5 moreIn ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior,...10.0 Critical
- mitel sip-dect firmwareAn encryption key vulnerability on Mitel SIP-DECT wireless devices 8.0 and 8.1 could allow an...5.9 Medium
- http authentication library project authentication libraryThe HTTP Authentication library before 2019-12-27 for Nim has weak password hashing because the...7.5 High
- philips endura firmware, pulsera firmware, veradius unity firmware +2 moreAn issue was found in Philips Veradius Unity, Pulsera, and Endura Dual WAN Router, Veradius Unity...6.5 Medium
- apple macos, mac os x +1 moreAn issue existed in the handling of links in encrypted PDFs. This issue was addressed by adding a...7.5 High
- bitwarden serverThe Bitwarden server through 1.32.0 has a potentially unwanted KDF.7.5 High
- intesync solismedAn issue was discovered in Intesync Solismed 3.3sp1. An flaw in the encryption implementation...5.9 Medium
- openstack python-keystoneclient, debian linux, fedoraproject fedora +1 more +3 moreInadequate Encryption Strength in python-keystoneclient9.8 Critical
- polarssl, debian linux, fedoraproject fedora +2 moreA Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak...7.4 High
- gnupg, canonical ubuntu linux, fedoraproject fedora +1 more +3 moreA flaw was found in the way certificate signatures could be forged using collisions found in the...5.3 Medium
- zabbixZabbix before 5.0 represents passwords in the users table with unsalted MD5.7.5 High
- openssl extension of ruby (git trunk), ruby-lang ruby +1 moreThe OpenSSL extension of Ruby (Git trunk) versions after 2011-09-01 up to 2011-11-03 always...9.8 Critical
- philips intellibridge ec40 firmware, intellibridge ec80 firmware +1 moreIn Philips IntelliBridge EC40 and EC80, IntelliBridge EC40 Hub all versions, and IntelliBridge...6.5 Medium
- medtronic valleylab exchange client, valleylab ft10 energy platform (vlft10gen), valleylab fx8 energy platform (vlfx8gen) +2 more +4 moreMedtronic Valleylab FT10 and FX8 Reversible One-way Hash7.0 High
- lightbend play frameworkPlay Framework Inadequate Encryption Strength vulnerability7.5 High
- cryptocat project cryptocatCryptocat before 2.0.22 has weak encryption in the Socialist Millionnaire Protocol7.5 High
- ibm security guardium big data intelligenceIBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses weaker than expected cryptographic...5.9 Medium
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2019.012.20034 and earlier; 2019.012.20035 and earlier versions...9.8 Critical
- infinitestudio infinite designThe Infinite Design application 3.4.12 for Android sends a username and password via TCP without...6.5 Medium
- microsoft windows, windows server, windows 7 +1 more +3 moreA security feature bypass vulnerability exists in Microsoft Windows when a man-in-the-middle...5.9 Medium
- google androidThe Print Service is susceptible to man in the middle attacks due to improperly used crypto. This...5.9 Medium
- supermicro a1sa2-2750f firmware, a1sai-2550f firmware, a1sai-2750f firmware +333 more +335 moreOn Supermicro H11, H12, M11, X9, X10, and X11 products, a combination of encryption and...10.0 Critical
- ibm cognos controllerIBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 uses weaker than expected cryptographic...5.9 Medium
- Show moreLoading…