CWE-327: Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- mayankmetha ruckyUse of a Broken or Risky Cryptographic Algorithm in com.mayank.rucky7.5 High
- revive-adserver revive adserverVulnerability in the generation of session IDs in revive-adserver < 5.3.0, based on the...7.1 High
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow...5.9 Medium
- matrix element, matrix-android-sdk2 +1 moreLogic error in Matrix SDK for Android5.9 Medium
- matrix javascript sdkmatrix-js-sdk can be tricked into disclosing E2EE room keys to a participating homeserver5.9 Medium
- sha2 project sha2Incorrect hash in sha29.8 Critical
- botan project botan, mozilla thunderbird, fedoraproject fedora +2 moreThe ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products,...5.9 Medium
- cryptopp crypto\+\+, fedoraproject fedora +1 moreThe ElGamal implementation in Crypto++ through 8.5 allows plaintext recovery because, during...5.9 Medium
- cyberark credential providerAn inadequate encryption vulnerability discovered in CyberArk Credential Provider before 12.1 may...7.5 High
- cyrus imap, debian linux, fedoraproject fedora +2 moreCyrus IMAP before 3.4.2 allows remote attackers to cause a denial of service (multiple-minute...7.5 High
- deltaww diaenergieDelta Electronics DIAEnergie Version 1.7.5 and prior may allow an attacker to retrieve passwords...5.5 Medium
- ibm sterling secure proxy, sterling external authentication server +1 moreIBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected...5.9 Medium
- ibm sterling secure proxy, sterling external authentication server +1 moreIBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected...5.9 Medium
- acquia mauticUse of a Broken or Risky Cryptographic Algorithm3.5 Low
- embysupport security, ibm resilient security orchestration automation and response +1 moreIBM Security SOAR uses weaker than expected cryptographic algorithms that could allow an attacker...5.9 Medium
- mediawiki, fedoraproject fedora +1 moreAn issue was discovered in the Oauth extension for MediaWiki through 1.35.2....9.8 Critical
- amazon cloudfrontAmazon AWS CloudFront TLSv1.2_2019 allows TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 and...9.8 Critical
- trustedfirmware op-teeIn Linaro OP-TEE before 3.7.0, by using inconsistent or malformed data, it is possible to call...9.1 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2021.1, an insecure key generation mechanism for encrypted...5.3 Medium
- meow hash project hashMeow hash 0.5/calico does not sufficiently thwart key recovery by an attacker who can query...5.3 Medium
- jhu charmIn Charm 0.43, any single user can decrypt DAC-MACS or MA-ABE-YJ14 data.6.5 Medium
- jhu charmIn Charm 0.43, any two users can collude to achieve the ability to decrypt YCT14 data.5.9 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA uses weaker than expected...5.9 Medium
- oracle advanced networking option, agile engineering data management, agile product lifecycle management +108 more +110 moreVulnerability in the Advanced Networking Option component of Oracle Database Server. Supported...8.3 High
- fortinet fortimailThe combination of various cryptographic issues in the session management of FortiMail 6.4.0...7.5 High
- ibm security verify access docker, security verify access +1 moreIBM Security Verify Access Docker 10.0.0 uses weaker than expected cryptographic algorithms that...5.9 Medium
- idrive remotepciDrive RemotePC before 7.6.48 on Windows allows information disclosure. A locally authenticated...3.3 Low
- idrive remotepciDrive RemotePC before 7.6.48 on Windows allows information disclosure. A man in the middle can...5.3 Medium
- ibm tivoli netcool impact, tivoli netcool\/impact +1 moreIBM Tivoli Netcool/Impact 7.1.0.20 and 7.1.0.21 uses an insecure SSH server configuration which...5.9 Medium
- fortinet fortimailMissing cryptographic steps in the Identity-Based Encryption service of FortiMail before 7.0.0...4.4 Medium
- ibm guardium data encryptionIBM Guardium Data Encryption (GDE) 3.0.0.3 and 4.0.0.4 uses weaker than expected cryptographic...5.9 Medium
- gnupg libgcryptThe ElGamal implementation in Libgcrypt before 1.9.4 allows plaintext recovery because, during...5.9 Medium
- ibm resilient soar, resilient security orchestration automation and response +1 moreIBM Resilient SOAR V38.0 uses weaker than expected cryptographic algorithms that could allow an...5.9 Medium
- intland codebeamerAn insufficiently protected credentials issue was discovered in Intland codeBeamer ALM 10.x...7.5 High
- ntpsec, fedoraproject fedora +1 morentpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate...4.0 Medium
- schneider-electric homelynk firmware, spacelynk firmware +1 moreUse of a Broken or Risky Cryptographic Algorithm vulnerability exists in homeLYnk (Wiser For KNX)...9.8 Critical
- ibm security guardiumIBM Security Guardium 11.2 uses weaker than expected cryptographic algorithms that could allow an...6.8 Medium
- emerson x-stream enhanced xefd firmware, x-stream enhanced xegk firmware, x-stream enhanced xegp firmware +1 more +3 moreA vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer....7.5 High
- alfa awus036h firmware, arista c-100 firmware, c-110 firmware +214 more +216 moreAn issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA,...6.5 Medium
- ieee 802.11, arista c-100 firmware, c-110 firmware +217 more +219 moreThe 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired...3.5 Low
- ieee 802.11, arista c-100 firmware, c-110 firmware +165 more +167 moreThe 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired...2.6 Low
- flarum frameworkBlade `@parent` Exploitation Leading To Possible XSS in Laravel5.3 Medium
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses weaker than expected cryptographic...5.9 Medium
- mozilla thunderbirdAn attacker may perform a DoS attack to prevent a user from sending encrypted email to a...6.5 Medium
- ibm collaborative lifecycle management, doors next, engineering lifecycle optimization +13 more +15 moreIBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow...5.9 Medium
- relic project relicIn RELIC before 2020-08-01, RSA PKCS#1 v1.5 signature forgery can occur because certain checks of...5.3 Medium
- [unknown] nettle, debian linux, fedoraproject fedora +6 more +8 moreA flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification...8.1 High
- libtpms project libtpms, fedoraproject fedora, redhat enterprise linux +2 moreA flaw was found in libtpms in versions before 0.8.2. The commonly used integration of libtpms...5.5 Medium
- huawei usg9500 firmware, usg9520 firmware, usg9560 firmware +1 more +3 moreThere is insecure algorithm vulnerability in Huawei products. A module uses less random input in...7.5 High
- redhat 3scale api managementA flaw was found in 3scale’s APIcast gateway that enabled the TLS 1.0 protocol. An attacker could...7.5 High
- Show moreLoading…