CWE-325 - Missing Required Cryptographic Step

Description

The product does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than advertised by that algorithm.





Latest vulnerabilities for CWE-325

Multiple vulnerabilities in Cisco ASA and Cisco FTD 2022-04-27
Medium Yes
Information disclosure in FortiMail 2021-12-07
Medium No
Information disclosure in FortiSandbox, FortiWeb and FortiADC 2021-12-07
Medium Yes
Multiple vulnerabilities in Fortinet FortiMail 2021-07-13
High Yes
Multiple vulnerabilities in OpenStack Keystone 2020-05-07
Medium Yes
Multiple vulnerabilities in B&R Automation Studio 2020-04-06
Medium Yes

References

Description of CWE-325 on Mitre website