Description
The software uses a Pseudo-Random Number Generator (PRNG) but does not correctly manage seeds.
Modes of Introduction:
– Architecture and Design
Related Weaknesses
Consequences
Access Control, Other: Bypass Protection Mechanism, Other
If a PRNG is used incorrectly, such as using the same seed for each initialization or using a predictable seed, then an attacker may be able to easily guess the seed and thus the random numbers. This could lead to unauthorized access to a system if the seed is used for authentication and authorization.
Potential Mitigations
CVE References
- CVE-2019-11495
- server uses erlang:now() to seed the PRNG, which
results in a small search space for potential random
seeds
- server uses erlang:now() to seed the PRNG, which
- CVE-2018-12520
- Product’s PRNG is not seeded for the generation of session IDs
- CVE-2016-10180
- Router’s PIN generation is based on rand(time(0)) seeding.
More Stories
The Most Dangerous Vulnerabilities in Apache Tomcat and How to Protect Against Them
Apache Tomcat is an open-source web server and servlet container that is widely used in enterprise environments to run Java...
ZDI-CAN-18333: A Critical Zero-Day Vulnerability in Microsoft Windows
Zero-day vulnerabilities are a serious threat to cybersecurity, as they can be exploited by malicious actors to gain unauthorized access...
CWE-669 – Incorrect Resource Transfer Between Spheres
Description The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere,...
CWE-67 – Improper Handling of Windows Device Names
Description The software constructs pathnames from user input, but it does not handle or incorrectly handles a pathname containing a...
CWE-670 – Always-Incorrect Control Flow Implementation
Description The code contains a control flow path that does not reflect the algorithm that the path is intended to...
CWE-671 – Lack of Administrator Control over Security
Description The product uses security features in a way that prevents the product's administrator from tailoring security settings to reflect...