2477
Category-1213: Random Number Issues
Category ID : 1213
Summary
Weaknesses in this category are related to a software system's random number generation.
Membership
Nature Type ID Name Page
MemberOf 699 Software Development 699 2555
HasMember 331 Insufficient Entropy 699 821
HasMember 334 Small Space of Random Values 699 827
HasMember 335 Incorrect Usage of Seeds in Pseudo-Random Number
Generator (PRNG)
699 829
HasMember 338 Use of Cryptographically Weak Pseudo-Random
Number Generator (PRNG)
699 837
HasMember 341 Predictable from Observable State 699 843
HasMember 342 Predictable Exact Value from Previous Values 699 845
HasMember 343 Predictable Value Range from Previous Values 699 847
HasMember 344 Use of Invariant Value in Dynamically Changing Context 699 849
HasMember 1241 Use of Predictable Algorithm in Random Number
Generator
699 2030
Category-1214: Data Integrity Issues
Category ID : 1214
Summary
Weaknesses in this category are related to a software system's data integrity components.
Frequently these deal with the ability to ensure the integrity of data, such as messages, resource
files, deployment files, and configuration files. The weaknesses in this category could lead to a
degradation of data integrity quality if they are not addressed.
Membership
Nature Type ID Name Page
MemberOf 699 Software Development 699 2555
HasMember 322 Key Exchange without Entity Authentication 699 788
HasMember 346 Origin Validation Error 699 853
HasMember 347 Improper Verification of Cryptographic Signature 699 857
HasMember 348 Use of Less Trusted Source 699 859
HasMember 349 Acceptance of Extraneous Untrusted Data With Trusted
Data
699 861
HasMember 351 Insufficient Type Distinction 699 866
HasMember 353 Missing Support for Integrity Check 699 874
HasMember 354 Improper Validation of Integrity Check Value 699 876
HasMember 494 Download of Code Without Integrity Check 699 1185
HasMember 565 Reliance on Cookies without Validation and Integrity
Checking
699 1283
HasMember 649 Reliance on Obfuscation or Encryption of Security-
Relevant Inputs without Integrity Checking
699 1430
HasMember 829 Inclusion of Functionality from Untrusted Control Sphere 699 1741
CWE Version 4.14
CWE-1215: Data Validation Issues
CWE-1215: Data Validation Issues