CWE-326: Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- amir20 dozzleDozzle uses unsafe hash for passwords4.8 Medium
- apache answerApache Answer: Avatar URL leaked user email addresses5.3 Medium
- openslidesOpenSlides 4.0.15 was discovered to be using a weak hashing algorithm to store passwords.7.5 High
- apache linkis, apache software foundation linkis spark engineconn +1 moreApache Linkis Spark EngineConn: Commons Lang's RandomStringUtils Random string security vulnerability7.5 High
- authenticatorSecret encryption vulnerable to brute-force attacks8.8 High
- opentext netiq advance authentication, microfocus netiq advanced authentication +1 moreWeak communication protocol identified in Advance Authentication client application8.3 High
- bmra software softwareInadequate encryption strength for some BMRA software before version 22.08 may allow an...7.1 High
- siemens location intelligence family, location intelligence +1 moreA vulnerability has been identified in Location Intelligence family (All versions < V4.4). The...6.0 Medium
- fiware keyrockPassword Manipulation8.3 High
- enphase envoyUpload of encrypted packages allows authenticated command execution in Enphase IQ Gateway v4.x and v5.x8.6 High
- b&r industrial automation automation runtimeDiffie-Hellman groups with insufficient strength used in SSL/TLS stack of B&R Automation Runtime8.3 High
- changing information technology tcbservisign windows version, changingtec tcb servisign +1 moreCHANGING Information Technology TCBServiSign Windows Version - Inadequate Encryption Strength6.5 Medium
- johnson controls exacqvision, johnsoncontrols exacqvision client, exacqvision server +2 moreexacqVision - Key exchanges9.0 Critical
- couchbase serverAn issue was discovered in Couchbase Server before 7.2.5 and 7.6.0 before 7.6.1. It does not...5.9 Medium
- siemens siprotec 5 6md84 (cp300), siprotec 5 6md85 (cp200), siprotec 5 6md85 (cp300) +62 more +64 moreA vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions < V9.64), SIPROTEC...8.2 High
- moodle, fedoraproject fedora +1 moremoodle: QR login key and auto-login key for the Moodle mobile app should be generated as separate keys5.4 Medium
- hcl software dryice optibot reset stationHCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header3.7 Low
- adobe coldfusionColdFusion | Weak Cryptography for Passwords (CWE-261)5.5 Medium
- ninjaframework ninjaWeak encryption in Ninja Core7.5 High
- dell data protection advisor, dp4400 firmware, dp5900 firmware +3 more +5 moreDell Data Protection Advisor, version(s) 19.9, contain(s) an Inadequate Encryption Strength vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, le…7.6 High
- hcl software dryice optibot reset stationHCL DRYiCE Optibot Reset Station is impacted by insecure encryption of One-Time Passwords (OTPs)6.5 Medium
- hcl software dryice optibot reset stationHCL DRYiCE Optibot Reset Station is impacted by insecure encryption of security questions6.5 Medium
- ibm aspera faspexIBM Aspera Faspex information disclosure5.5 Medium
- ibm aspera faspexIBM Aspera Faspex data manipulation3.6 Low
- broadcom brocade sannav, brocade sannav +1 moreTLS/SSL weak message authentication code ciphers are added by default for port 180827.5 High
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav has weak encryption in internal SSH ports5.7 Medium
- broadcom brocade sannav, brocade sannav +1 moreBrocade SANnav before v2.3.1, v2.3.0a uses weak encryption7.5 High
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Weak Certificate Strength in Panorama Software Leads to Sensitive Information Disclosure5.3 Medium
- mbed mbedtls, trustedfirmware mbed tls +1 moreAn issue was discovered in Mbed TLS 3.5.x before 3.6.0. When an SSL context was reset with the...6.5 Medium
- ciliumInsecure IPsec transport encryption in Cilium8.0 High
- ibm security verify directoryIBM Security Verify Directory information disclosure4.5 Medium
- cdac appsamvid softwareInformation Disclosure Vulnerability in CDAC AppSamvid Software7.8 High
- cdac usb pratirodhInformation Disclosure Vulnerability in CDAC USB Pratirodh7.1 High
- alpha-innotec heat pumps firmwareAn issue in AIT-Deutschland Alpha Innotec Heatpumps wp2reg-V.3.88.0-9015 and Novelan Heatpumps...6.8 Medium
- dexidp dexDex 2.37.0 is discarding TLSconfig and always serves deprecated TLS 1.0/1.1 and insecure ciphers7.5 High
- lantronix xport, xport edge firmware +1 moreLantronix XPort Weak Encoding for Password5.7 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +31 more +33 moreMicrosoft Local Security Authority Subsystem Service Information Disclosure Vulnerability5.7 Medium
- assaabloy yale keyless smart lock firmwareWeak encryption mechanisms in RFID Tags in Yale Keyless Lock v1.0 allows attackers to create a...6.5 Medium
- assaabloy yale ia-210 firmwareWeak encryption mechanisms in RFID Tags in Yale IA-210 Alarm v1.0 allows attackers to create a...6.5 Medium
- assaabloy yale conexis l1 firmwareWeak encryption mechanisms in RFID Tags in Yale Conexis L1 v1.1.0 allows attackers to create a...6.5 Medium
- joynext mib3 infotainment unit, preh mib3 firmware +1 moreWeak encoding for password in UDS services3.3 Low
- acer sk-9662 firmwareAn issue discovered in Acer Wireless Keyboard SK-9662 allows attacker in physical proximity to...6.1 Medium
- carglglz upydevupydev has weak encryption padding7.5 High
- elecom lan-w300n\/p firmware, lan-w300n\/rs firmware, lan-w301nr firmware +65 more +67 moreInadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD. and...6.5 Medium
- linecorp lineThe leakage of channel access token in DRAGON FAMILY Line 13.6.1 allows remote attackers to send...6.5 Medium
- linecorp lineThe leakage of channel access token in UPDATESALON C-LOUNGE Line 13.6.1 allows remote attackers...6.5 Medium
- linecorp lineThe leakage of channel access token in bluetrick Line 13.6.1 allows remote attackers to send...6.5 Medium
- linecorp lineThe leakage of channel access token in best_training_member Line 13.6.1 allows remote attackers...6.5 Medium
- linecorp lineThe leakage of channel access token in taketorinoyu Line 13.6.1 allows remote attackers to send...6.5 Medium
- linecorp lineThe leakage of channel access token in platinum clinic Line 13.6.1 allows remote attackers to...6.5 Medium
- Show moreLoading…