CWE-780: Use of RSA Algorithm without OAEP
The product uses the RSA algorithm but does not incorporate Optimal Asymmetric Encryption Padding (OAEP).
A kind of CWE-327 Use of a Broken or Risky Cryptographic Algorithm.
From the CWE List. © The MITRE Corporation.
Newest
- oberon microsystems ag psa crypto Insecure RSA-OAEP implementation with all-zero seed for padding in Oberon PSA Crypto 2.3 Low
- ibm robotic process automation IBM Robotic Process Automation information disclosure 5.9 Medium
- ping identity pingid adapter for pingfederate, pingidentity pingfederate, ping identity pingfederate (includes pingid adapter) +2 more +4 more Misconfiguration of RSA padding for offline MFA in the PingID Adapter for PingFederate. 7.7 High