1. CWE-311 : Missing Encryption of Sensitive Data
2. CWE-327 : Use of a Broken or Risky Cryptographic Algorithm
MIT-25 When using industry-approved techniques, use them correctly. Don't cut corners by skipping resourceintensive steps (CWE-325). These steps are often essential for preventing common attacks.
1. CWE-311 : Missing Encryption of Sensitive Data