Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CWE CATEGORY:Comprehensive Categorization: Randomness
Category ID:1414
Vulnerability Mapping:Prohibited
Status:Incomplete
DetailsContent HistoryObserved CVE ExamplesReports
▼Summary

Weaknesses in this category are related to randomness.

▼Membership
NatureMappingTypeIDName
MemberOfProhibitedV1400Comprehensive Categorization for Software Assurance Trends
HasMemberAllowedB1204Generation of Weak Initialization Vector (IV)
HasMemberAllowedB1241Use of Predictable Algorithm in Random Number Generator
HasMemberAllowedB323Reusing a Nonce, Key Pair in Encryption
HasMemberAllowedV329Generation of Predictable IV with CBC Mode
HasMemberDiscouragedC330Use of Insufficiently Random Values
HasMemberAllowedB331Insufficient Entropy
HasMemberAllowedV332Insufficient Entropy in PRNG
HasMemberAllowedV333Improper Handling of Insufficient Entropy in TRNG
HasMemberAllowedB334Small Space of Random Values
HasMemberAllowedB335Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)
HasMemberAllowedV336Same Seed in Pseudo-Random Number Generator (PRNG)
HasMemberAllowedV337Predictable Seed in Pseudo-Random Number Generator (PRNG)
HasMemberAllowedB338Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
HasMemberAllowedV339Small Seed Space in PRNG
HasMemberAllowed-with-ReviewC340Generation of Predictable Numbers or Identifiers
HasMemberAllowedB341Predictable from Observable State
HasMemberAllowedB342Predictable Exact Value from Previous Values
HasMemberAllowedB343Predictable Value Range from Previous Values
HasMemberAllowedB344Use of Invariant Value in Dynamically Changing Context
HasMemberAllowedV6J2EE Misconfiguration: Insufficient Session-ID Length
Nature: MemberOf
Mapping: Prohibited
Type: View
ID: 1400
Name: Comprehensive Categorization for Software Assurance Trends
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 1204
Name: Generation of Weak Initialization Vector (IV)
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 1241
Name: Use of Predictable Algorithm in Random Number Generator
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 323
Name: Reusing a Nonce, Key Pair in Encryption
Nature: HasMember
Mapping: Allowed
Type: Variant
ID: 329
Name: Generation of Predictable IV with CBC Mode
Nature: HasMember
Mapping: Discouraged
Type: Class
ID: 330
Name: Use of Insufficiently Random Values
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 331
Name: Insufficient Entropy
Nature: HasMember
Mapping: Allowed
Type: Variant
ID: 332
Name: Insufficient Entropy in PRNG
Nature: HasMember
Mapping: Allowed
Type: Variant
ID: 333
Name: Improper Handling of Insufficient Entropy in TRNG
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 334
Name: Small Space of Random Values
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 335
Name: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)
Nature: HasMember
Mapping: Allowed
Type: Variant
ID: 336
Name: Same Seed in Pseudo-Random Number Generator (PRNG)
Nature: HasMember
Mapping: Allowed
Type: Variant
ID: 337
Name: Predictable Seed in Pseudo-Random Number Generator (PRNG)
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 338
Name: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
Nature: HasMember
Mapping: Allowed
Type: Variant
ID: 339
Name: Small Seed Space in PRNG
Nature: HasMember
Mapping: Allowed-with-Review
Type: Class
ID: 340
Name: Generation of Predictable Numbers or Identifiers
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 341
Name: Predictable from Observable State
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 342
Name: Predictable Exact Value from Previous Values
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 343
Name: Predictable Value Range from Previous Values
Nature: HasMember
Mapping: Allowed
Type: Base
ID: 344
Name: Use of Invariant Value in Dynamically Changing Context
Nature: HasMember
Mapping: Allowed
Type: Variant
ID: 6
Name: J2EE Misconfiguration: Insufficient Session-ID Length
▼Vulnerability Mapping Notes
Usage:Prohibited
Reason:
Rationale:

This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves [REF-1330].

Comments:

See member weaknesses of this category.

▼Notes
▼Taxonomy Mappings
Taxonomy NameEntry IDFitEntry Name
▼References
Reference ID: REF-1330
Title: CVE --> CWE Mapping Guidance - Quick Tips
Version: v4.15
Author: MITRE
Publication:
Publisher:
Edition:
URL:https://cwe.mitre.org/documents/cwe_usage/quick_tips.html
URL Date:
Day:25
Month:03
Year:2021
Details not found