Falhas do tipo CWE-340

50 resultados

Geração de números ou identificadores previsíveis

A aplicação usa um algoritmo fraco ou determinístico para gerar valores que deveriam ser aleatórios ou únicos (tokens, senhas, IDs de sessão, chaves). Um atacante consegue prever o próximo valor e contornar autenticação, falsificar sessões ou acessar dados de outros usuários.

Exemplo

Sistema que gera token de redefinição de senha usando apenas timestamp + ID do usuário (ex: hash(data_hora + user_id)). Atacante consegue calcular tokens válidos para qualquer usuário sem necessidade de acessá-los, redefinindo senhas à vontade.

Como mitigar

Use geradores criptograficamente seguros (SecureRandom, os.urandom, crypto.getRandomValues). Incorpore entropia suficiente: 128+ bits para tokens. Nunca combine apenas informações públicas ou sequenciais; sempre use uma fonte de aleatoriedade de verdade.

CVE-2025-40918MEDIUMAuthen::SASL::Perl::DIGEST_MD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurelyEPSS 0.4%CVE-2025-40933HIGHApache::AuthAny::Cookie v0.201 or earlier for Perl generates session ids insecurelyEPSS 0.4%CVE-2026-5080MEDIUMDancer::Session::Abstract versions through 1.3522 for Perl generates session ids insecurelyEPSS 0.4%CVE-2026-56016MEDIUMCGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sourcesEPSS 0.4%CVE-2024-12034MEDIUMAdvanced Google reCAPTCHA <= 1.25 - Brute Force Protection IP UnblockEPSS 0.3%CVE-2026-9733CRITICALMojolicious::Plugin::Web::Auth::OAuth2 versions through 0.17 for Perl have an insecure default state parameterEPSS 0.3%CVE-2026-5085CRITICALSolstice::Session versions through 1440 for Perl generates session ids insecurelyEPSS 0.3%CVE-2025-40925CRITICALStarch versions 0.14 and earlier generate session ids insecurelyEPSS 0.3%CVE-2025-40923HIGHPlack-Middleware-Session before version 0.35 for Perl generates session ids insecurelyEPSS 0.3%CVE-2026-5084MEDIUMWebDyne::Session versions before 3.003_704 for Perl generate the session id insecurelyEPSS 0.3%CVE-2026-5081CRITICALApache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecureEPSS 0.3%CVE-2025-62294HIGHPredictable Generation of Password Recovery TokenEPSS 0.3%CVE-2026-13577HIGHDancer2 versions through 2.1.0 for Perl generate insecure session ids when required CSPRNG modules are unavailableEPSS 0.3%CVE-2025-40919MEDIUMAuthen::DigestMD5 versions 0.01 through 0.04 for Perl generate the cnonce insecurelyEPSS 0.3%CVE-2026-28810MEDIUMPredictable DNS Transaction IDs Enable Cache Poisoning in Built-in ResolverEPSS 0.3%CVE-2024-10603MEDIUMWeaknesses in the generation of TCP/UDP source ports and some other header values in Google's gVisor allowed them to be predicted by an exteEPSS 0.3%CVE-2021-29480MEDIUMDefault client side session signing key is highly predictableEPSS 0.3%CVE-2026-45673MEDIUMNetty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source PortEPSS 0.3%CVE-2025-40924MEDIUMCatalyst::Plugin::Session before version 0.44 for Perl generates session ids insecurelyEPSS 0.3%CVE-2026-8503MEDIUMApache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session idsEPSS 0.2%