CWE-327: Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.
A kind of CWE-693 Protection Mechanism Failure.
From the CWE List. © The MITRE Corporation.
Newest
- lf-edge, zededa eve os, linuxfoundation edge virtualization engine +1 moreVault Key Sealed With SHA1 PCRs8.8 High
- vmware aria operations for networksAria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of...9.8 Critical
- ibm spectrum copy data management, storage copy data management +1 moreIBM Spectrum Copy Data Management information disclosure5.9 Medium
- ibm aix, vios +1 moreIBM AIX information disclosure6.2 Medium
- broadcom raid controller web interface, lsi storage authority (lsa) +1 moreBroadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linux5.5 Medium
- broadcom raid controller web interface, lsi storage authority (lsa), lsi storage authority +1 more +3 moreBroadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites7.5 High
- broadcom raid controller web interface, lsi storage authority (lsa), lsi storage authority +2 more +4 moreBroadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols7.5 High
- hcl software dryice iautomateUse of a broken cryptographic algorithm affects HCL DRYiCE iAutomate6.4 Medium
- hcl software dryice mycloudUse of a broken cryptographic algorithm affects HCL DRYiCE MyCloud6.4 Medium
- sap powerdesignerInformation Disclosure Vulnerabilities in SAP PowerDesigner5.3 Medium
- ibm sterling connect:express for unix, sterling connect\ +1 moreIBM Sterling Connect:Express for UNIX information disclosure5.9 Medium
- cisco cjoseIncorrect Authentication Tag length usage in AES GCM decryption in OpenIDC/cjose8.6 High
- sonicwall analytics, gms, global management system +2 moreSonicWall GMS and Analytics use outdated Tiny Encryption Algorithm (TEA) with a hardcoded key to...9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Remote Desktop Security Feature Bypass Vulnerability6.8 Medium
- siemens ruggedcom rox mx5000, ruggedcom rox mx5000re, ruggedcom rox rx1400 +19 more +21 moreA vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM...7.4 High
- ibm websphere application serverIBM WebSphere Application Server information disclosure5.1 Medium
- ovarro tbox lt2, tbox ms-cpu32, tbox rm2 +7 more +9 moreThe affected TBox RTUs store hashed passwords using MD5 encryption, which is an insecure...6.5 Medium
- google androidthere is a possible way to bypass cryptographic assurances due to a logic error in the code. This...7.8 High
- ibm qradar security information and event manager, security qradar siem +1 moreIBM QRadar information disclosure5.9 Medium
- hcl software bigfix osd bare metal serverHCL BigFix OSD Bare Metal Server is affected by a weak cryptographic algorithm.7.0 High
- bishopfox sliverSilver vulnerable to MitM attack against implants due to a cryptography vulnerability8.1 High
- fortinet fortisiemA use of a broken or risky cryptographic algorithm [CWE-327] in Fortinet FortiSIEM before 6.7.1...5.9 Medium
- dell secure connect gatewayDell SCG 5.14 contains an information disclosure vulnerability during the SRS to SCG upgrade...6.5 Medium
- google androidIn btm_sec_encrypt_change of btm_sec.cc, there is a possible way to downgrade the link key type...8.8 High
- nfine rapid development platformNFine Rapid Development Platform CheckLogin weak hash3.7 Low
- dell cloudlinkCloudLink 7.1.2 and all prior versions contain a broken or risky cryptographic algorithm...5.9 Medium
- facebook hhvmHHVM 4.172.0 and all prior versions use TLS 1.0 for secure connections when handling tls:// URLs...9.8 Critical
- ibm qradar data synchronization app, qradar data synchronization +1 moreIBM QRadar Data Synchronization App information disclosure4.4 Medium
- fortinet fortinacA use of a weak cryptographic algorithm vulnerability [CWE-327] in FortiNAC 9.4.1 and below, 9.2...3.8 Low
- ibm java, infosphere information server, websphere application server +1 more +3 moreIBM Java information disclosure7.5 High
- ibm safer paymentsIBM Safter Payments information disclosure5.9 Medium
org.bitbucket.b_c:jose4jMavenChosen Ciphertext Attack in Jose4jNo score- ping identity pingid adapter for pingfederate, pingidentity pingfederate, ping identity pingfederate (includes pingid adapter) +2 more +4 moreMisconfiguration of RSA padding for offline MFA in the PingID Adapter for PingFederate.7.7 High
- liveboxcloud vdeskAn issue was discovered in LIVEBOX Collaboration vDesk through v018. A Cryptographic Issue can...6.5 Medium
- microsoft windows server 2008 service pack 2, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +12 more +14 moreWindows Kerberos Elevation of Privilege Vulnerability8.1 High
- rocket software unidata, universe +1 moreWeak encryption in UniRPC protocol7.5 High
- sandisk privateaccess, westerndigital sandisk privateaccess +1 moreSanDisk PrivateAccess Deprecated TLS protocol versions supported7.4 High
- tp-link tl-wr940n firmwareTP-Link router TL-WR940N V6 3.19.1 Build 180119 uses a deprecated MD5 algorithm to hash the admin...7.5 High
- dell secure connect gateway, secure connect gateway (scg) 5.0 appliance - srs +1 moreDell Secure Connect Gateway (SCG) version 5.14.00.12 contains a broken cryptographic algorithm...5.9 Medium
- fortinet fortinac, fortinac-f +1 moreSome cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7,...6.0 Medium
- dell unity, emc unity operating environment, emc unity xt operating environment +1 more +3 moreDell EMC Unity versions before 5.2.0.0.5.173 , use(es) broken cryptographic algorithm. A remote...5.9 Medium
- dell powerscale onefsDell PowerScale OneFS, versions 9.2.0.x through 9.4.0.x contain an information vulnerability. A...5.9 Medium
- ibm sterling external authentication server, sterling secure proxy +1 moreIBM Sterling External Authentication Server information disclosure2.3 Low
- arista networks eosAll versions of Econolite EOS traffic control software are vulnerable to CWE-328: Use of Weak...9.8 Critical
- ibm security verify governanceIBM Security Verify Governance, Identity Manager virtual appliance component information disclosure3.7 Low
- ibm websphere application serverIBM WebSphere Application Server information disclosure5.9 Medium
- red hat openshiftThe Birthday attack against 64-bit block ciphers flaw (CVE-2016-2183) was reported for the health...5.3 Medium
- arm mbed tlsUse of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum...4.7 Medium
- ibm security verify governance, identity manager, security verify governance +1 moreIBM Security Verify Governance, Identity Manager information disclosure5.9 Medium
- auth0 jsonwebtoken, node-jsonwebtoken +1 morejsonwebtoken unrestricted key type could lead to legacy keys usage5.9 Medium
- Show moreLoading…