CWE-326: Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- ibm app connect enterprise certified containerIBM App Connect Enterprise Certified Container information disclosure5.3 Medium
- mozilla firefoxLogic bug in process allocation allowed to read arbitrary files6.5 Medium
- ge proficy historianAn unauthorized user with network access and the decryption key could decrypt sensitive data,...7.5 High
- hitachi energy foxman-un, unem +1 moreWeak DES encryption7.1 High
- ge inet 900 firmware, inet ii 900 firmware, sd1 firmware +5 more +7 moreCertain General Electric Renewable Energy products have inadequate encryption strength. This...9.8 Critical
- iofinnet tss-libCollision of hash values in github.com/bnb-chain/tss-lib9.1 Critical
- hcl software bigfix platformHCL BigFix Platform is affected by insecure credential storage6.0 Medium
- sambaSince the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by...9.8 Critical
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2022.3 the built-in web server leaked information about open...4.0 Medium
- horner automation remote compact controller (rcc) 972, hornerautomation rcc972 firmware +1 moreThe Config-files of Horner Automation’s RCC 972 with firmware version 15.40 are encrypted with...7.5 High
- dwbooster appointment hour booking, codepeople appointment hour booking – booking calendar +1 moreAppointment Hour Booking <= 1.3.72 - CAPTCHA Bypass5.3 Medium
- jenkins script security, jenkins project script security plugin +1 moreWhole-script approval in Jenkins Script Security Plugin vulnerable to SHA-1 collisions7.5 High
- hcl software verse for android, hcltech verse +1 moreHCL Verse for Android is susceptible to an APK signing key check vulnerability5.9 Medium
- passster project passsterPassster < 3.5.5.5.2 - Insecure Storage of Password5.9 Medium
- sap customer data cloud, sap se customer data cloud (gigya) +1 moreSAP Customer Data Cloud (Gigya mobile app for Android) - version 7.4, uses encryption method...5.2 Medium
- haskell aesonThe aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse...6.5 Medium
- solarwinds network configuration managerHashed Credential Exposure Vulnerability6.5 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreAllocation of Resources Without Limits or Throttling in ikus060/rdiffweb3.6 Low
- octopus serverIn affected versions of Octopus Server it was identified that the same encryption process was...5.3 Medium
- western digital wd discoveryWD Discovery's Use of Weak Hashing Algorithm for Code Signing5.3 Medium
- trend micro apex oneA vulnerability in Trend Micro Apex One and Apex One as a Service could allow an attacker to...7.5 High
- adobe experience managerAEM Violation of Secure Design Principles Security feature bypass5.3 Medium
- digitaldruid hoteldruidThe component controlla_login function in HotelDruid Hotel Management Software v3.0.3 generates a...9.8 Critical
- blink1 blink1control2Blink1Control2 uses weak password encryption7.5 High
- nextcloud password policy, kiteworks security-advisories +1 moreNextcloud Password Policy's generated passwords are not fully validated by HIBPValidator2.7 Low
- simple sign on project sign on, unknown simple single sign on +1 moreSimple Single Sign On <= 4.1.0 - Authentication Bypass7.5 High
- ls industrial systems (lsis) co. ltd ls electric xg5000, plc: xgb-xbch, plc: xgb-xbms +238 more +240 moreUpdate6.5 Medium
- hytec hwl-2511-ss firmwareHytec Inter HWL-2511-SS v1.05 and below implements a SHA512crypt hash for the root account which...9.8 Critical
- intel proset wi-fi 6e ax210 firmware, wi-fi 6 ax200 firmware, wi-fi 6 ax201 firmware +6 more +8 moreInadequate encryption strength for some Intel(R) PROSet/Wireless WiFi products may allow an...8.8 High
- apache openofficeApache OpenOffice Weak Master Keys8.8 High
- apache openofficeApache OpenOffice Static Initialization Vector Allows to Recover Passwords for Web Connections Without Knowing the Master Password8.8 High
- quest kace systems management applianceIn Quest KACE Systems Management Appliance (SMA) through 12.0, a hash collision is possible...9.8 Critical
- libreoffice, debian linux +1 moreWeak Master Keys8.8 High
- libreoffice, debian linux +1 moreExecution of Untrusted Macros Due to Improper Certificate Validation7.5 High
- couchbase serverIn Couchbase Server 7.1.x before 7.1.1, an encrypted Private Key passphrase may be leaked in the...5.9 Medium
- ibm security verify governanceIBM Security Verify Identity Manager 10.0 uses weaker than expected cryptographic algorithms that...5.1 Medium
- nodejs node, node.js, siemens sinec ins +2 moreA cryptographic vulnerability exists on Node.js on linux in versions of 18.x prior to 18.40.0...5.3 Medium
- ibm security verify accessIBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 uses weaker than...5.9 Medium
- openssl, debian linux, fedoraproject fedora +20 more +22 moreAES OCB fails to encrypt some bytes5.3 Medium
- owllabs meeting owl pro firmwareOwl Labs Meeting Owl 5.2.0.15 allows attackers to retrieve the passcode hash via a certain c 10...7.4 High
- javaez project javaezReversible One-Way Hash and Use of a Broken or Risky Cryptographic Algorithm in io.github.javaezlib.JavaEZ7.5 High
- emerson open enterprise, openenterprise scada server +1 moreEmerson OpenEnterprise - Inadequate Encryption Strength3.8 Low
- inhand networks inrouter302, inhandnetworks ir302 firmware +1 moreAn information disclosure vulnerability exists in the router configuration export functionality...6.3 Medium
- hcl software bigfix platformHCL BigFix Platform is affected by weak web transport security4.8 Medium
- broadcom sannavBrocade SANnav before SANnav 2.2.0 application uses the Blowfish symmetric encryption algorithm...6.5 Medium
- xwiki, xwiki xwiki-platform +1 moreCrypto script service uses hashing algorithm SHA1 with RSA for certificate signature in xwiki-platform5.4 Medium
- mozilla thunderbirdWhen viewing an email message A, which contains an attached message B, where B is encrypted or...4.3 Medium
- secomea gatemanager, linkmanager, sitemanager +13 more +15 moreClients may connect to a GateManager with TLS 1.05.6 Medium
- ibm spectrum scaleIBM Spectrum Scale 5.1.0 through 5.1.3.0 uses weaker than expected cryptographic algorithms that...5.9 Medium
- bulletproofs project bulletproofsThe Bulletproofs 2017/1066 paper mishandles Fiat-Shamir generation because the hash computation...8.1 High
- Show moreLoading…