798
Reference Description
https://www.cve.org/CVERecord?id=CVE-2002-1739
CVE-2005-2281 Weak encryption scheme
https://www.cve.org/CVERecord?id=CVE-2005-2281
CVE-2002-1872 Weak encryption (XOR)
https://www.cve.org/CVERecord?id=CVE-2002-1872
CVE-2002-1910 Weak encryption (reversible algorithm).
https://www.cve.org/CVERecord?id=CVE-2002-1910
CVE-2002-1946 Weak encryption (one-to-one mapping).
https://www.cve.org/CVERecord?id=CVE-2002-1946
CVE-2002-1975 Encryption error uses fixed salt, simplifying brute force / dictionary attacks
(overlaps randomness).
https://www.cve.org/CVERecord?id=CVE-2002-1975
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 719 OWASP Top Ten 2007 Category A8 - Insecure
Cryptographic Storage
629 2333
MemberOf 720 OWASP Top Ten 2007 Category A9 - Insecure
Communications
629 2333
MemberOf 729 OWASP Top Ten 2004 Category A8 - Insecure Storage 711 2338
MemberOf 816 OWASP Top Ten 2010 Category A7 - Insecure
Cryptographic Storage
809 2359
MemberOf 934 OWASP Top Ten 2013 Category A6 - Sensitive Data
Exposure
928 2391
MemberOf 959 SFP Secondary Cluster: Weak Cryptography 888 2398
MemberOf 1003 Weaknesses for Simplified Mapping of Published
Vulnerabilities
1003 2576
MemberOf 1029 OWASP Top Ten 2017 Category A3 - Sensitive Data
Exposure
1026 2436
MemberOf 1346 OWASP Top Ten 2021 Category A02:2021 -
Cryptographic Failures
1344 2488
MemberOf 1402 Comprehensive Categorization: Encryption 1400 2527
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Weak Encryption
OWASP Top Ten 2007 A8 CWE More Specific Insecure Cryptographic Storage
OWASP Top Ten 2007 A9 CWE More Specific Insecure Communications
OWASP Top Ten 2004 A8 CWE More Specific Insecure Storage
Related Attack Patterns
CAPEC-ID Attack Pattern Name
20 Encryption Brute Forcing
112 Brute Force
192 Protocol Analysis
References
[REF-7]Michael Howard and David LeBlanc. "Writing Secure Code". 2nd Edition. 2002
December 4. Microsoft Press. < https://www.microsoftpressstore.com/store/writing-securecode-
9780735617223 >.
CWE Version 4.14
CWE-327: Use of a Broken or Risky Cryptographic Algorithm
CWE-327: Use of a Broken or Risky Cryptographic Algorithm