Skip to content
OpenAdvisories

Weakness (CWE)

CWE-326: Inadequate Encryption Strength

Class Draft

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

How to prevent it (1 mitigation)

  1. Architecture and Design

    Use an encryption scheme that is currently considered to be strong by experts in the field.

Source: MITRE CWE-326

All Critical High Medium Low Exploited only Public exploit

82 results · Clear filters · Feed

  • High 7.5
    CVE-2012-4571

    Python Keyring does not securely initialize encryption cipher

    Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack.

    keyring python-keyring Debian PyPI
  • High 7.8
    CVE-2001-1546 Public exploit

    Pathways Homecare 6.5 uses weak encryption for user names and passwords, which allows local users to gain privileges by…