CWE-335Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)

Description

The product uses a Pseudo-Random Number Generator (PRNG) but does not correctly manage seeds.

[object Object]

Common consequences

• Access Control,Other→Bypass Protection Mechanism,Other
  If a PRNG is used incorrectly, such as using the same seed for each initialization or using a predictable seed, then an attacker may be able to easily guess the seed and thus the random numbers. This could lead to unauthorized access to a s

Related CWEs

Recent CVEs classified under this CWE