cve.bz

CWE-320: Key Management Errors, page 2

Filter

Weaknesses in this category are related to errors in the management of cryptographic keys.

What the weakness is: CWE-320 at MITRE. OWASP Top 10: A04:2025 Cryptographic Failures

Ask an AI about CWE-320

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-320: Key Management Errors and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/320.html and https://cve.bz/cve/cwe/320?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 6.3CVE-2025-5164EPSS 0.8%

    A vulnerability has been found in PerfreeBlog 4.0.11 and classified as problematic. This vulnerability affects the function JwtUtil of the component JWT Handler. The manipulation leads to use of hard-coded cryptographic key . The attack c…

  2. 2.3CVE-2025-3177EPSS 0.5%

    A vulnerability was found in FastCMS 0.1.5. It has been declared as critical. This vulnerability affects unknown code of the component JWT Handler. The manipulation leads to use of hard-coded cryptographic key . The attack can be initiate…

  3. 4.8CVE-2025-2220EPSS 0.4%

    A vulnerability was found in Odyssey CMS up to 10.34. It has been classified as problematic. Affected is an unknown function of the file /modules/odyssey_contact_form/odyssey_contact_form.php of the component reCAPTCHA Handler. The manipul…

  4. 2.3CVE-2024-10920EPSS 0.5%

    A vulnerability was found in mariazevedo88 travels-java-api up to 5.0.1 and classified as problematic. Affected by this issue is the function doFilterInternal of the file travels-java-api-master\src\main\java\io\github\mariazevedo88\travel…

  5. 7.4CVE-2024-36391EPSS 0.4%

    MileSight DeviceHub - CWE-320: Key Management Errors may allow Authentication Bypass and Man-In-The-Middle Traffic

  6. 7.1CVE-2023-21652EPSS 0.1%

    Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.

  7. 7.1CVE-2023-21626EPSS 0.1%

    Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.

  8. 7.5CVE-2021-26322EPSS 1.0%

    Persistent platform private key may not be protected with a random IV leading to a potential “two time pad attack”.

  9. 6.5CVE-2020-1688EPSS 0.3%

    On Juniper Networks SRX Series and NFX Series, a local authenticated user with access to the shell may obtain the Web API service private key that is used to provide encrypted communication between the Juniper device and the authenticator …

  10. 7.4CVE-2019-12621EPSS 0.4%

    A vulnerability in Cisco HyperFlex Software could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack. The vulnerability is due to insufficient key management. An attacker could exploit this vulnerability by obt…

  11. 5.3CVE-2019-9150EPSS 1.4%

    Mailvelope prior to 3.3.0 does not require user interaction to import public keys shown on web page. This functionality can be tricked to either hide a key import from the user or obscure which key was imported.

  12. 4.6CVE-2019-1586EPSS 0.2%

    A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) Software could allow an unauthenticated, local attacker with physical access to obtain sensitive information from an affected device. The vulnerability is due to …

  13. 7.5CVE-2015-1316EPSS 1.2%

    Juju Core's Joyent provider before version 1.25.5 uploads the user's private ssh key.

  14. 9.1CVE-2019-5672EPSS 1.4%

    NVIDIA Jetson TX1 and TX2 contain a vulnerability in the Linux for Tegra (L4T) operating system (on all versions prior to R28.3) where the Secure Shell (SSH) keys provided in the sample rootfs are not replaced by unique host keys after sam…

  15. 7.5CVE-2019-9894EPSS 2.4%

    A remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before host key verification.

  16. 5.9CVE-2018-20187EPSS 1.5%

    A side-channel issue was discovered in Botan before 2.9.0. An attacker capable of precisely measuring the time taken for ECC key generation may be able to derive information about the high bits of the secret key, as the function to derive …

  17. 7.5CVE-2017-13887EPSS 0.8%

    In macOS High Sierra before 10.13.2, a logic issue existed in APFS when deleting keys during hibernation. This was addressed with improved state management.

  18. 5.5CVE-2017-18323EPSS 0.2%

    Cryptographic key material leaked in TDSCDMA RRC debug messages in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 21…

  19. 5.5CVE-2017-18319EPSS 0.2%

    Information leak in UIM API debug messages in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD …

  20. 6.8CVE-2018-15397EPSS 1.2%

    A vulnerability in the implementation of Traffic Flow Confidentiality (TFC) over IPsec functionality in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remo…

  21. 5.5CVE-2016-7056EPSS 0.6%

    A timing attack flaw was found in OpenSSL 1.0.1u and before that could allow a malicious user with local access to recover ECDSA P-256 private keys.

  22. 5.9CVE-2016-8635EPSS 2.0%

    It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement attack. An attacker could use this flaw to recover private keys by confining the client DH key to small subgroup of th…

  23. 7.5CVE-2016-8614EPSS 2.5%

    A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct ke…

  24. 5.5CVE-2017-2625EPSS 0.5%

    It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. On a multi-user system using xdmcp, a local attacker could potentially use information available from the process list to brute force the ke…

  25. 4.9CVE-2018-12438EPSS 0.5%

    The Elliptic Curve Cryptography library (aka sunec or libsunec) allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to eit…

  26. 4.9CVE-2018-12433EPSS 0.3%

    cryptlib through 3.4.4 allows a memory-cache side-channel attack on DSA and ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover a key, the attacker needs access to either the local machine or a different vir…

  27. 5.3CVE-2018-7559EPSS 1.1%

    An issue was discovered in OPC UA .NET Standard Stack and Sample Code before GitHub commit 2018-04-12, and OPC UA .NET Legacy Stack and Sample Code before GitHub commit 2018-03-13. A vulnerability in OPC UA applications can allow a remote …

  28. 7.5CVE-2018-0732EPSS 47%

    During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this p…

  29. 3.7CVE-2016-1000346EPSS 2.2%

    In the Bouncy Castle JCE Provider version 1.55 and earlier the other party DH public key is not fully validated. This can cause issues as invalid keys can be used to reveal details about the other party's private key where static Diffie-He…

  30. 4.7CVE-2018-7534EPSS 0.2%

    In Stealth Authorization Server before 3.3.017.0 in Unisys Stealth Solution, an encryption key may be left in memory.

  31. 7.4CVE-2013-2233EPSS 1.9%

    Ansible before 1.2.1 makes it easier for remote attackers to conduct man-in-the-middle attacks by leveraging failure to cache SSH host keys.

  32. 9.8CVE-2016-10467EPSS 1.2%

    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile and Snapdragon Mobile SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 615/16/SD 415, SD 617, SD 650/52, SD 800, SD 808, SD 820, and SD 820A, functio…

  33. 9.8CVE-2016-10421EPSS 1.2%

    In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410…

  34. 7.5CVE-2015-0153EPSS 1.9%

    D-Link DIR-815 devices with firmware before 2.07.B01 allow remote attackers to obtain sensitive information by leveraging cleartext storage of the wireless key.

  35. 7.5CVE-2018-9234EPSS 2.0%

    GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in apparently valid certifications that occurred only with access to a signing subkey.

  36. 9.8CVE-2018-0124EPSS 5.1%

    A vulnerability in Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to bypass security protections, gain elevated privileges, and execute arbitrary code. The vulnerability is due to insecure key g…

  37. 7.5CVE-2015-7503EPSS 1.4%

    Zend Framework before 2.4.9, zend-framework/zend-crypt 2.4.x before 2.4.9, and 2.5.x before 2.5.2 allows remote attackers to recover the RSA private key.

  38. 8.1CVE-2015-0839EPSS 6.3%

    The hp-plugin utility in HP Linux Imaging and Printing (HPLIP) makes it easier for man-in-the-middle attackers to execute arbitrary code by leveraging use of a short GPG key id from a keyserver to verify print plugin downloads.

  39. 9.8CVE-2015-0936ExploitEPSS 78%

    Ceragon FibeAir IP-10 have a default SSH public key in the authorized_keys file for the mateidu user, which allows remote attackers to obtain SSH access by leveraging knowledge of the private key.

  40. 7.5CVE-2016-6879EPSS 0.7%

    The X509_Certificate::allowed_usage function in botan 1.11.x before 1.11.31 might allow attackers to have unspecified impact by leveraging a call with more than one Key_Usage set in the enum value.

  41. 9.8CVE-2015-4166EPSS 0.7%

    Cloudera Key Trustee Server before 5.4.3 does not store keys synchronously, which might allow attackers to have unspecified impact via vectors related to loss of an encryption key.

  42. 5.9CVE-2016-6882EPSS 1.3%

    MatrixSSL before 3.8.7, when the DHE_RSA based cipher suite is supported, makes it easier for remote attackers to obtain RSA private key information by conducting a Lenstra side-channel attack.

  43. 7.8CVE-2016-2880EPSS 0.2%

    IBM QRadar 7.2 stores the encryption key used to encrypt the service account password which can be obtained by a local user. IBM Reference #: 1997340.

  44. 5.9CVE-2016-9963EPSS 3.1%

    Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages.

  45. 5.3CVE-2016-2217EPSS 2.5%

    The OpenSSL address implementation in Socat 1.7.3.0 and 2.0.0-b8 does not use a prime number for the DH, which makes it easier for remote attackers to obtain the shared secret.

  46. 7.5CVE-2016-6886EPSS 1.7%

    The pstm_reverse function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service (invalid memory read and crash) via a (1) zero value or (2) the key's modulus for the secret key during RSA key exchange.

  47. 6.2CVE-2016-10011EPSS 1.1%

    authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child pr…

  48. 8.8CVE-2015-8542EPSS 2.2%

    An issue was discovered in Open-Xchange Guard before 2.2.0-rev8. The "getprivkeybyid" API call is used to download a PGP Private Key for a specific user after providing authentication credentials. Clients provide the "id" and "cid" paramet…

  49. –CVE-2014-2361EPSS 0.4%

    OleumTech WIO DH2 Wireless Gateway and Sensor Wireless I/O Modules, when BreeZ is used, do not require authentication for reading the site security key, which allows physically proximate attackers to spoof communication by obtaining this k…