CWE-321Use of Hard-coded Cryptographic Key

Description

The product uses a hard-coded, unchangeable cryptographic key.

Common consequences

• Access Control→Bypass Protection Mechanism,Gain Privileges or Assume Identity,Read Application Data
  If hard-coded cryptographic keys are used, it is almost certain that malicious users will gain access through the account in question. The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may

Potential mitigations

• Architecture and Design
  Prevention schemes mirror that of hard-coded password storage.

Related CWEs

Recent CVEs classified under this CWE