835
Weakness ID : 337
Structure : Simple
Abstraction : Variant
Description
A Pseudo-Random Number Generator (PRNG) is initialized from a predictable seed, such as the
process ID or system time.
Extended Description
The use of predictable seeds significantly reduces the number of possible seeds that an attacker
would need to test in order to predict which random numbers will be generated by the PRNG.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 335 Incorrect Usage of Seeds in Pseudo-Random Number
Generator (PRNG)