CWE-321—Use of Hard-coded Cryptographic Key

PUBLISHEDweakness recordHigh
released 2006-07-19 · last modified 2025-12-11
CWE-321 - Use of Hard-coded Cryptographic Key - Diagram

Metadata

CWE ID：
CWE-321
摘要：
Variant
结构：
Simple
状态：
Draft
发布日期：
2006-07-19
更新日期：
2025-12-11

名称

Use of Hard-coded Cryptographic Key

描述

The product uses a hard-coded, unchangeable cryptographic key.

常见后果

范围：
Access Control
影响：
Bypass Protection Mechanism, Gain Privileges or Assume Identity, Read Application Data
注释：
If hard-coded cryptographic keys are used, it is almost certain that malicious users will gain access through the account in question. The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered.

相关 CWE

browse all CWEs
相关工具:检查可疑链接 →运行更深入的网站漏洞扫描 →校验文件哈希 →