BaseDraft
CWE-331Insufficient Entropy
Category: other
Description
The product uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.
Common consequences· 1
- Access Control / Other — Bypass Protection Mechanism, OtherAn attacker could guess the random numbers generated and could gain unauthorized access to a system if the random numbers are used for authentication and authorization.
Potential mitigations· 1
- [Implementation]Determine the necessary entropy to adequately provide for randomness and predictability. This can be achieved by increasing the number of bits of objects such as keys and seeds.
Related CAPEC attack patterns· 1
References
Exploits (incoming)1
| Type | Target | Confidence | Tier |
|---|---|---|---|
| AttackPattern | Session Credential Falsification through Predictioncapec-59 | 100% | live |
(incoming)9
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Vulnerability | CVE-2025-13399cve-2025-13399 | 0% | live |
| Vulnerability | CVE-2025-15387cve-2025-15387 | 0% | live |
| Vulnerability | CVE-2025-1828cve-2025-1828 | 0% | live |
| Vulnerability | CVE-2025-47781cve-2025-47781 | 0% | live |
| Vulnerability | CVE-2025-52464cve-2025-52464 | 0% | live |
| Vulnerability | CVE-2025-66565cve-2025-66565 | 0% | live |
| Vulnerability | CVE-2025-67504cve-2025-67504 | 0% | live |
| Vulnerability | CVE-2026-34236cve-2026-34236 | 0% | live |
| Vulnerability | CVE-2026-7210cve-2026-7210 | 0% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.