Description
The product does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than advertised by the algorithm.
Potential Impact
- Access Control: Bypass Protection Mechanism
- Confidentiality: Read Application Data
- Accountability: Hide Activities
Detection Methods
- Automated Static Analysis: Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without havin...
Related Weaknesses
References
View on MITRE CWE Database →
