CWE-327: Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- redhat enterprise linux desktop, enterprise linux hpc node, enterprise linux server +1 more +3 moremod_ns in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat...7.5 High
- dell bsafe, bsafe ssl-c +1 moreEMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE...7.5 High
- dell bsafe, bsafe ssl-c +1 moreEMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE...7.5 High
- canonical ubuntu linux, debian linux, fujitsu sparc enterprise m3000 firmware +58 more +60 moreThe RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state...5.0 Medium
- dell bsafe crypto-c-micro-edition, bsafe crypto-j +1 moreThe NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit...5.8 Medium
- canonical ubuntu linux, fujitsu m10-1 firmware, m10-4 firmware +13 more +15 moreThe RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases,...5.9 Medium
- ematia elixirElixir can leak information due to weak use of crypto4.3 Medium
- huawei d100 firmwareThe default configuration of the Wi-Fi component on the Huawei D100 does not use encryption,...5.0 Medium
- newsoftwares folder lockFolder Lock 5.9.5 and earlier uses weak encryption (ROT-25) for the password, which allows local...4.4 Medium
- opensuselibxcrypt in SUSE openSUSE 11.0 uses the DES algorithm when the configuration specifies the MD5...7.5 High
- wordpress, fedoraproject fedora +1 moreWordpress 1.5 through 2.3.1 uses cookie values based on the MD5 hash of a password MD5 hash,...9.8 Critical
- microsoft windows mobileMicrosoft ActiveSync 4.1, as used in Windows Mobile 5.0, uses weak encryption (XOR obfuscation...4.6 Medium
- visionsoft auditThe Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 uses weak...7.5 High
- spectrumcu cash receipting systemSpectrum Cash Receipting System before 6.504 uses weak cryptography (static substitution) in the...7.8 High
- openssl, canonical ubuntu linux +1 moreThe default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead...7.5 High
- teekai tracking onlineTeeKai Tracking Online 1.0 uses weak encryption of web usage statistics in data/userlog/log.txt,...7.5 High
- c2net stonghold web server, hp open market secure webserver, microsoft exchange server +10 more +12 moreInformation from SSL-encrypted sessions via PKCS #1.5.0 Medium