CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
baseThe product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptographically strong.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (266)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-53704US | critical9.8OT critical | KEV | ||
An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication. | ||||
| CVE-2019-5420US | critical9.8OT critical | Exploit | ||
A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess the automatically generated development mode secret token. Thi… | ||||
| CVE-2023-34039US | critical9.8OT high | Exploit | ||
Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation. A malicious actor with network access to Aria Ope… | ||||
| CVE-2008-0166US | high7.5 | Exploit | ||
OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable numbers, which makes it easier for remot… | ||||
| CVE-2009-2367US | critical9.8 | Exploit | ||
cgi-bin/makecgi-pro in Iomega StorCenter Pro generates predictable session IDs, which allows remote attackers to hijack active sessions and gain privileges via brute force guessing… | ||||
| CVE-2021-43799US | critical9.8 | Exploit | ||
Zulip is an open-source team collaboration tool. Zulip Server installs RabbitMQ for internal message passing. In versions of Zulip Server prior to 4.9, the initial installation (un… | ||||
| CVE-2022-45782US | high8.8 | Exploit | ||
An issue was discovered in dotCMS core 5.3.8.5 through 5.3.8.15 and 21.03 through 22.10.1. A cryptographically insecure random generation algorithm for password-reset token generat… | ||||
| CVE-2023-39910US | high7.5 | Exploit | ||
The cryptocurrency wallet entropy seeding mechanism used in Libbitcoin Explorer 3.0.0 through 3.6.0 is weak, aka the Milk Sad issue. The use of an mt19937 Mersenne Twister PRNG res… | ||||
| CVE-2022-40769US | high7.5 | Exploit | ||
profanity through 1.60 has only four billion possible RNG initializations. Thus, attackers can recover private keys from Ethereum vanity addresses and steal cryptocurrency, as expl… | ||||
| CVE-2021-3538US | critical9.8 | — | ||
A flaw was found in github.com/satori/go.uuid in versions from commit 0ef6afb2f6cdd6cdaeee3885a95099c63f18fc8c to d91630c8510268e75203009fe7daf2b8e1d60c45. Due to insecure randomne… | ||||
| CVE-2020-35926US | critical9.8OT elevated | — | ||
An issue was discovered in the nanorand crate before 0.5.1 for Rust. It caused any random number generator (even ChaCha) to return all zeroes because integer truncation was mishand… | ||||
| CVE-2020-28642US | critical9.8 | — | ||
In InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it easier for remote attackers to conduct admin Account Takeover… | ||||
| CVE-2015-9435US | critical9.8 | — | ||
The oauth2-provider plugin before 3.1.5 for WordPress has incorrect generation of random numbers. | ||||
| CVE-2019-16303US | critical9.8 | — | ||
A class generated by the Generator in JHipster before 6.3.0 and JHipster Kotlin through 1.1.0 produces code that uses an insecure source of randomness (apache.commons.lang3 RandomS… | ||||
| CVE-2017-18021US | critical9.8 | — | ||
It was discovered that QtPass before 1.2.1, when using the built-in password generator, generates possibly predictable and enumerable passwords. This only applies to the QtPass GUI… | ||||
| CVE-2005-4730US | high10.0OT elevated | — | ||
Unspecified vulnerability in PEAR Text_Password 1.0 has unknown impact and attack vectors, related to "problematic seeding" of the random number generator, possibly predictable see… | ||||
| CVE-2026-9205US | critical9.8 | — | ||
IBM Langflow OSS contains a weak cryptographic key derivation vulnerability in the ensure_fernet_key() function. | ||||
| CVE-2026-25726US | critical9.8 | — | ||
Cloudreve is a self-hosted file management and sharing system. Prior to version 4.13.0, the application uses the weak pseudo-random number generator math/rand seeded with time.Now(… | ||||
| CVE-2026-3256US | critical9.8 | — | ||
HTTP::Session versions before 0.54 for Perl defaults to using insecurely generated session ids.
HTTP::Session defaults to using HTTP::Session::ID::SHA1 to generate session ids usi… | ||||
| CVE-2025-15604US | critical9.8 | — | ||
Amon2 versions before 6.17 for Perl use an insecure random_string implementation for security functions.
In versions 6.06 through 6.16, the random_string function will attempt to… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan