CWE-334
Small Space of Random Values
AI Translation Available
The number of possible random values is smaller than needed by the product, making it more susceptible to brute force attacks.
Status
draft
Abstraction
base
Affected Platforms
Technical Details
AI Translation
Common Consequences
access control
other
Impacts
bypass protection mechanism
other
Potential Mitigations
Phases:
architecture and design
requirements
Descriptions:
•
Use products or modules that conform to FIPS 140-2 [REF-267] to avoid obvious entropy problems. Consult FIPS 140-2 Annex C ("Approved Random Number Generators").