CWE-1414 · Kategoria
Comprehensive Categorization: Randomness
- Status
- Niekompletny
- Dodano
- 25 kwietnia 2023
- Ostatnia zmiana
- 29 czerwca 2023
Opis
Weaknesses in this category are related to randomness.
Wpisy w tej grupie
- CWE-6 J2EE Misconfiguration: Insufficient Session-ID Length
- CWE-323 Reusing a Nonce, Key Pair in Encryption
- CWE-329 Generation of Predictable IV with CBC Mode
- CWE-330 Use of Insufficiently Random Values
- CWE-331 Insufficient Entropy
- CWE-332 Insufficient Entropy in PRNG
- CWE-333 Improper Handling of Insufficient Entropy in TRNG
- CWE-334 Small Space of Random Values
- CWE-335 Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)
- CWE-336 Same Seed in Pseudo-Random Number Generator (PRNG)
- CWE-337 Predictable Seed in Pseudo-Random Number Generator (PRNG)
- CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
- CWE-339 Small Seed Space in PRNG
- CWE-340 Generation of Predictable Numbers or Identifiers
- CWE-341 Predictable from Observable State
- CWE-342 Predictable Exact Value from Previous Values
- CWE-343 Predictable Value Range from Previous Values
- CWE-344 Use of Invariant Value in Dynamically Changing Context
- CWE-1204 Generation of Weak Initialization Vector (IV)
- CWE-1241 Use of Predictable Algorithm in Random Number Generator
Źródła
Wpis z katalogu CWE 4.20.