Skip to content
OpenAdvisories

Weakness (CWE)

CWE-321: Use of Hard-coded Cryptographic Key

Variant Draft

The product uses a hard-coded, unchangeable cryptographic key.

How to prevent it (1 mitigation)

  1. Architecture and Design

    Prevention schemes mirror that of hard-coded password storage.

Source: MITRE CWE-321

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.0
    CVE-2025-30406 Exploited Public exploit EPSS 94%

    Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to th…

    Gladinet CentreStack
    KEV Apr 8, 2025
  • Critical 9.8
    CVE-2016-4437 Exploited Public exploit EPSS 93%

    Improper Access Control in Apache Shiro

    Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.

    shiro shiro org.apache.shiro:shiro-core Debian Ubuntu Maven
    KEV Nov 3, 2021