Falhas do tipo CWE-331

87 resultados

Entropia insuficiente em geração de números aleatórios

A fraqueza ocorre quando o software usa um gerador de números aleatórios ou pseudoaleatórios com entropia insuficiente para fins críticos de segurança, como gerar tokens, chaves criptográficas ou identificadores únicos. Um atacante consegue prever ou reproduzir esses valores, comprometendo toda a segurança que depende dessa aleatoriedade.

Exemplo

Uma aplicação usa Math.random() em JavaScript para gerar um token de sessão, ou confia em valores de /dev/urandom em uma máquina virtual com pouca entrada de entropia no boot. Em ambos os casos, um atacante consegue enumerar tokens válidos ou quebrar a criptografia que depende desses números.

Como mitigar

Use sempre geradores criptograficamente seguros apropriados para seu contexto: java.security.SecureRandom em Java, secrets.token_hex() em Python, crypto.getRandomBytes() em Node.js, ou /dev/urandom em sistemas Unix. Garanta que o sistema operacional coleta entropia suficiente (verifique /proc/sys/kernel/random/entropy_avail em Linux).

CVE-2024-53522HIGHBangkok Medical Software HOSxP XE v4.64.11.3 was discovered to contain a hardcoded IDEA Key-IV pair in the HOSxPXE4.exe and HOS-WIN32.INI coEPSS 0.8%CVE-2023-46648HIGHInsufficient Entropy in GitHub Enterprise Server Management Console Invitation TokenEPSS 0.7%CVE-2020-29505HIGHDell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain a Key ManagemenEPSS 0.7%CVE-2024-3411CRITICALInsufficient Randomness When Validating an IPMI Authenticated SessionEPSS 0.7%CVE-2024-8796MEDIUMInsufficient Default OTP Shared Secret LengthEPSS 0.6%CVE-2020-36925HIGHArteco Web Client DVR/NVR Session ID Brute Force Authentication BypassEPSS 0.6%CVE-2024-6508HIGHOpenshift-console: oauth2 insufficient state parameter entropyEPSS 0.6%CVE-2023-4344CRITICALBroadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connectionEPSS 0.6%CVE-2025-47781CRITICALRallly Insufficient Password Login Token Entropy Leads to Account TakeoverEPSS 0.6%CVE-2024-25407HIGHSteVe v3.6.0 was discovered to use predictable transaction ID's when receiving a StartTransaction request. This vulnerability can allow attaEPSS 0.6%CVE-2017-2625MEDIUMIt was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a locEPSS 0.5%CVE-2024-58134HIGHMojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as an HMAC session cookie secret by defaultEPSS 0.5%CVE-2023-36610MEDIUM ​The affected TBox RTUs generate software security tokens using insufficient entropy. The random seed used to generate the software tokens EPSS 0.5%CVE-2025-67504CRITICALWBCE CMS has Weak Random Number Generator in Password Generation FunctionEPSS 0.5%CVE-2017-2626MEDIUMIt was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local attacker could potentially use this flaw for sessEPSS 0.5%CVE-2025-66565CRITICALFiber Utils UUIDv4 and UUID Silent Fallback to Predictable ValuesEPSS 0.5%CVE-2026-38447CRITICALosTicket 1.18.3 generates API keys using a predictable construction based on MD5 hashing. The use of MD5, combined with predictable inputs sEPSS 0.5%CVE-2025-52464CRITICALMeshtastic Repeated Public and Private KeypairsEPSS 0.4%CVE-2026-46473HIGHAuthen::TOTP versions before 0.1.1 for Perl generate secrets using randEPSS 0.4%CVE-2021-3505—A flaw was found in libtpms in versions before 0.8.0. The TPM 2 implementation returns 2048 bit keys with ~1984 bit strength due to a bug inEPSS 0.4%