CWE-334

Small Space of Random Values

Weakness Description

The number of possible random values is smaller than needed by the product, making it more susceptible to brute force attacks.

Potential Mitigations

Architecture and DesignRequirements

Use products or modules that conform to FIPS 140-2 [REF-267] to avoid obvious entropy problems. Consult FIPS 140-2 Annex C ("Approved Random Number Generators").

Common Consequences

Access ControlOther
Bypass Protection MechanismOther

An attacker could easily guess the values used. This could lead to unauthorized access to a system if the seed is used for authentication and authorization.

Advertisement

Related Weaknesses