Common Weakness Enumeration
CWE-329 Generation of Predictable IV with CBC Mode
Description
The product generates and uses a predictable initialization Vector (IV) with Cipher Block Chaining (CBC) Mode, which causes algorithms to be susceptible to dictionary attacks when they are encrypted under the same key.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-329 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-g29v-q6h7-76wh | CVE-2026-45787 | MODERATE |
electerm's encrypt method not safe enough |
2026-06-09 | |
| GHSA-q8w6-w55c-ccv5 | CVE-2026-6420 | MODERATE |
Keylime has a hardcoded attestation challenge nonce that allows replay attacks |
2026-05-11 | |
| GHSA-2ppp-9496-p23q | CVE-2020-5408 | MODERATE |
Insufficient Entropy in Spring Security |
2021-06-09 |