CWE-325 - Missing Required Cryptographic Step

Description

The product does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than advertised by that algorithm.





Latest vulnerabilities for CWE-325

Missing Required Cryptographic Step in Cisco TelePresence CE Software and RoomOS 2022-10-06
Medium No
Insecure encryption in FortiOS keytab 2022-09-06
Low Yes
Missing Required Cryptographic Step in CaSS 2022-05-23
Medium Yes
Multiple vulnerabilities in Cisco ASA and Cisco FTD 2022-04-27
Medium Yes
Information disclosure in FortiMail 2021-12-07
Medium No
Information disclosure in FortiSandbox, FortiWeb and FortiADC 2021-12-07
Medium Yes
Multiple vulnerabilities in Fortinet FortiMail 2021-07-13
High Yes
Multiple vulnerabilities in OpenStack Keystone 2020-05-07
Medium Yes
Multiple vulnerabilities in B&R Automation Studio 2020-04-06
Medium Yes

References

Description of CWE-325 on Mitre website