Common Weakness Enumeration

CWE-335 Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)

Description

The product uses a Pseudo-Random Number Generator (PRNG) but does not correctly manage seeds.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-335 ordered by modification date.

6 reviewed records

Advisory ID	NVD ID	Severity	PURLs	Summary	Last Modified
GHSA-v9gv-xp36-jgj8	CVE-2022-31008	MODERATE	-	RabbitMQ has predictable credential obfuscation seed value used in Shovel and Federation plugins	2026-06-30
GHSA-pff9-53m5-qr56	CVE-2025-24783	LOW	maven/org.apache.cocoon/cocoon-forms-impl maven/org.apache.cocoon/cocoon-sitemap-impl	Apache Cocoon vulnerable to Incorrect Usage of Seeds in Pseudo-Random Number Generator	2025-01-27
GHSA-vfp4-xx6m-7vf6	CVE-2020-7010	HIGH	golang/github.com/elastic/cloud-on-k8s	Cryptographic Issues in ECK	2024-02-12
GHSA-cmr8-5w4c-44v8	CVE-2022-39218	HIGH	npm/@fastly/js-compute	Fastly Compute@Edge JS Runtime has fixed random number seed during compilation	2022-09-21
GHSA-ggfx-h9xj-5v9c	CVE-2019-25061	HIGH	gem/random_password_generator	Insecure PRNG use in random_password_generator	2022-05-31
GHSA-3f99-hvg4-qjwj	CVE-2021-41117	HIGH	npm/keypair	Insecure random number generation in keypair	2021-10-11