CWE-328: Use of Weak Hash
The product uses an algorithm that produces a digest (output value) that does not meet security expectations for a hash function that allows an adversary to reasonably determine the original input (preimage attack), find another input that can produce the same hash (2nd preimage attack), or find multiple inputs that evaluate to the same hash (birthday attack).
A kind of CWE-327 Use of a Broken or Risky Cryptographic Algorithm.
From the CWE List. © The MITRE Corporation.
Newest
- enrocrypt project enrocryptUse of Password Hash With Insufficient Computational Effort and Use of a Broken or Risky Cryptographic Algorithm and Reversible One-Way Hash in hashing.py7.5 High
- mattermost serverMattermost Server uses weak hashing for OAuth, email verification tokens and invitations7.5 High
- medtronic valleylab exchange client, valleylab ft10 energy platform (vlft10gen), valleylab fx8 energy platform (vlfx8gen) +2 more +4 moreMedtronic Valleylab FT10 and FX8 Reversible One-way Hash7.0 High
- openstack glanceOpenStack Glance Signature Verification Bypass5.5 Medium
- rack project rackRack Gem Subject to Denial of Service via Hash Collisions5.0 Medium
- ietf md5The MD5 Message-Digest Algorithm is not collision resistant, which makes it easier for context...5.0 Medium