CWE•Base•Draft•20 recent CVEs

CWE-325Missing Cryptographic Step

Description

The product does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than advertised by the algorithm.

Common consequences

Access Control→Bypass Protection Mechanism
Confidentiality,Integrity→Read Application Data,Modify Application Data
Accountability,Non-Repudiation→Hide Activities

Related CWEs

CWE-1240Use of a Cryptographic Primitive with a Risky Implementation CWE-573Improper Following of Specification by Caller CWE-358Improperly Implemented Security Check for Standard

Recent CVEs classified under this CWE