CWE-959 · Kategoria
SFP Secondary Cluster: Weak Cryptography
- Status
- Niekompletny
- Dodano
- 29 lipca 2014
- Ostatnia zmiana
- 29 czerwca 2023
Opis
This category identifies Software Fault Patterns (SFPs) within the Weak Cryptography cluster.
Wpisy w tej grupie
- CWE-261 Weak Encoding for Password
- CWE-322 Key Exchange without Entity Authentication
- CWE-323 Reusing a Nonce, Key Pair in Encryption
- CWE-324 Use of a Key Past its Expiration Date
- CWE-326 Inadequate Encryption Strength
- CWE-329 Generation of Predictable IV with CBC Mode
- CWE-347 Improper Verification of Cryptographic Signature
- CWE-640 Weak Password Recovery Mechanism for Forgotten Password
Wpis z katalogu CWE 4.20.