CWE-334—Small Space of Random Values
PUBLISHEDweakness record
released 2006-07-19 · last modified 2025-12-11
Metadata
- CWE ID：
- CWE-334
- 摘要：
- Base
- 结构：
- Simple
- 状态：
- Draft
- 发布日期：
- 2006-07-19
- 更新日期：
- 2025-12-11
名称
Small Space of Random Values
描述
The number of possible random values is smaller than needed by the product, making it more susceptible to brute force attacks.
常见后果
- 范围：
- Access Control, Other
- 影响：
- Bypass Protection Mechanism, Other
- 注释：
- An attacker could easily guess the values used. This could lead to unauthorized access to a system if the seed is used for authentication and authorization.