CWE-340: Generation of Predictable Numbers or Identifiers
The product uses a scheme that generates numbers or identifiers that are more predictable than required.
A kind of CWE-330 Use of Insufficiently Random Values.
From the CWE List. © The MITRE Corporation.
Newest
- miyagawa plack::middleware::sessionPlack-Middleware-Session before version 0.35 for Perl generates session ids insecurely7.3 High
- google gvisorWeaknesses in the generation of TCP/UDP source ports and some other header values in Google's...6.3 Medium
- pgadmin pgagentpgAgent scheduled batch job scripts are created in a predictable temporary directory potentially allowing a denial of service5.5 Medium
- webfactory advanced google recaptchaAdvanced Google reCAPTCHA <= 1.25 - Brute Force Protection IP Unblock5.3 Medium
- xwiki pdf viewer macro, xwikisas macro-pdfviewer, macro pdfviewer +2 moreThe PDF viewer macro allows accessing any attachment without access right checks7.5 High
- rittal cmc iii processing units firmware, iot interface firmware, rittal gmbh & co. kg iot interface & cmc iii processing unit +1 more +3 morePredictable Session ID9.8 Critical
- canonical jujuJUJU_CONTEXT_ID is a predictable authentication secret8.7 High
- cente ipv4, ipv4snmpv2, ipv4snmpv3 +12 more +14 moreGeneration of predictable identifiers issue exists in Cente middleware TCP/IP Network Series. If...5.3 Medium
- saltSalt security advisory release - 2023-OCT-276.7 Medium
- nettyNetty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Port6.8 Medium
- ratpackDefault client side session signing key is highly predictable4.4 Medium
- pleaseedit project pleaseeditPermissions bypass in pleaser7.8 High
- sylabs sif, singularity image format +1 morePredictable SIF UUID Identifiers7.5 High
- facebook whatsapp for android, whatsapp +1 moreMedia ContentProvider URIs used for opening attachments in other apps were generated sequentially...3.3 Low
- puppetPuppet uses predictable filenames, allowing arbitrary file overwrite6.2 Medium