CWE-327: Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- ibm datapower gatewayIBM DataPower Gateway 10.0.0.0 through 10.0.1.0 uses weaker than expected cryptographic...5.9 Medium
- netgear gs116e firmware, jgs516pe firmware +1 moreThe hashing algorithm implemented for NSDP password authentication on NETGEAR JGS516PE/GS116Ev2...8.8 High
- ibm security verify bridgeIBM Security Verify Bridge uses weaker than expected cryptographic algorithms that could allow an...5.9 Medium
- coolkit ewelinkWeak encryption in the Quick Pairing mode in the eWeLink mobile application (Android application...4.6 Medium
- openssl, oracle business intelligence, enterprise manager for storage management +5 more +7 moreIncorrect SSLv2 rollback protection3.7 Low
- steghide project steghidesteghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to...7.5 High
- ibm security verify information queueIBM Security Verify Information Queue information disclosure2.2 Low
- ocleanOclean Mobile Application 2.1.2 communicates with an external website using HTTP so it is...7.5 High
- psypraxAn issue was discovered in Psyprax beforee 3.2.2. Passwords used to encrypt the data are stored...7.5 High
- hcltechsw onetest performanceHCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An...7.5 High
- jetbrains ktorIn JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default.5.3 Medium
- jetbrains ktorIn JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible.5.3 Medium
- indutny ellipticCryptographic Issues6.8 Medium
- rsa archerArcher before 6.8 P2 (6.8.0.2) is affected by a path exposure vulnerability. A remote...4.3 Medium
- pyres termod4 firmwareSensitive information disclosure and weak encryption in Pyrescom Termod4 time management devices...7.5 High
- xerox workcentre 3655 firmware, workcentre 3655i firmware, workcentre 5865 firmware +27 more +29 moreAn issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt...7.5 High
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2.6 uses weaker than expected cryptographic...5.3 Medium
- ietf public key cryptography standards \#1, st stm32cubef0, stm32cubef1 +19 more +21 moreBleichenbacher's attack on PKCS #1 v1.5 padding for RSA in STM32 cryptographic firmware library...5.9 Medium
- microchip libraries for applications, ietf public key cryptography standards \#1 +1 moreBleichenbacher's attack on PKCS #1 v1.5 padding for RSA in Microchip Libraries for Applications...5.9 Medium
- canonical remote-login-serviceInsecure crypto for storing passwords5.5 Medium
- ibm security guardium insightsIBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that...5.9 Medium
- ibm security guardium insightsIBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that...5.9 Medium
- ibm security guardium insightsIBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that...5.9 Medium
- ibm emptoris strategic supply managementIBM Emptoris Strategic Supply Management 10.1.3 uses weaker than expected cryptographic...5.9 Medium
- gigamon gigavue-osGigaVUE-OS (GVOS) 5.4 - 5.9 uses a weak algorithm for a hash stored in internal database.2.3 Low
- hcl bigfix inventory, hcltech bigfix platform +1 moreTLS-RSA cipher suites are not disabled in HCL BigFix Inventory up to v10.0.2. If TLS 2.0 and...7.5 High
- siemens sicam a8000 cp-8000, sicam a8000 cp-8021, sicam a8000 cp-8022 +3 more +5 moreA vulnerability has been identified in SICAM A8000 CP-8000 (All versions < V16), SICAM A8000 CP...7.3 High
- siemens logo! 8 bm (incl. siplus variants), logo\! 8 bm firmware +1 moreA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3)....7.5 High
- siemens logo! 8 bm (incl. siplus variants), logo\! 8 bm firmware +1 moreA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3)....7.5 High
- mcafee database securityDatabase Security(DBS)-Use of a Broken or Risky Cryptographic Algorithm6.3 Medium
- ibm cloud pak for securityIBM Cloud Pak for Security 1.3.0.1 (CP4S) uses weaker than expected cryptographic algorithms...3.7 Low
- cdatatec 72408a firmware, 9008a firmware, 9016a firmware +25 more +27 moreAn issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P,...7.5 High
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.2 uses weaker than expected...5.9 Medium
- amazon aws encryption sdk, aws sdk +1 moreRobustness weakness in AWS KMS and Encryption SDKs4.8 Medium
- postgresql, debian linux +1 moreUse of a Broken or Risky Cryptographic Algorithm in PostgreSQL8.1 High
- untangle firewall ngUntangle Firewall NG before 16.0 uses MD5 for passwords.5.3 Medium
- python-rsa project python-rsa, fedoraproject fedora, redhat openstack platform +2 moreTiming attacks in python-rsa7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreIn versions 14.1.0-14.1.0.1 and 14.1.2.5-14.1.2.7, when a BIG-IP object is created or listed...6.5 Medium
- synology diskstation manager (dsm), diskstation manager, skynas firmware +2 moreAlgorithm downgrade vulnerability in QuickConnect in Synology DiskStation Manager (DSM) before 6...8.3 High
- synology router manager, router manager (srm), diskstation manager +2 moreAlgorithm downgrade vulnerability in QuickConnect in Synology Router Manager (SRM) before 1.2.4...8.3 High
- bigbluebuttonBigBlueButton through 2.2.28 uses STUN/TURN resources from a third party, which may represent an...7.3 High
- domainmodDomainMOD before 4.14.0 uses MD5 without a salt for password storage.7.5 High
- ibm security guardium big data intelligenceIBM Security Guardium Big Data Intelligence 1.0 (SonarG) uses weaker than expected cryptographic...5.9 Medium
- google tink, tink java +1 moreCiphertext integrity weakness in Tink5.3 Medium
- ibm curam social program management, curam spm +1 moreIBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a...5.9 Medium
- hcltech appscan"HCL AppScan Enterprise makes use of broken or risky cryptographic algorithm to store REST API...5.3 Medium
- apache nifiInadequate Encryption Strength in Apache NiFi7.5 High
- glpi-project glpiInsecure encryption algorithm in GLPI7.8 High
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could...3.7 Low
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could...5.9 Medium
- Show moreLoading…