Common Weakness Enumeration
CWE-340 Generation of Predictable Numbers or Identifiers
Description
The product uses a scheme that generates numbers or identifiers that are more predictable than required.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-340 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-xmv7-r254-6q78 | CVE-2026-45673 | MODERATE |
Netty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Port |
2026-06-12 | |
| GHSA-xfhr-q72q-jcrj | CVE-2026-4269 | MODERATE |
Improper S3 ownership verification in Bedrock AgentCore Starter Toolkit |
2026-03-17 | |
| GHSA-wh2j-26j7-9728 | CVE-2026-2473 | HIGH |
Google Cloud Vertex AI has a a vulnerability involving predictable bucket naming |
2026-02-20 | |
| GHSA-4277-m35q-7c9w | CVE-2023-34049 | MODERATE |
Salt preflight script could be attacker controlled |
2024-11-14 | |
| GHSA-mh98-763h-m9v4 | CVE-2024-7558 | MODERATE |
JUJU_CONTEXT_ID is a predictable authentication secret |
2024-10-09 | |
| GHSA-mpmx-gm5v-q789 | CVE-2011-3871 | MODERATE |
Puppet uses predictable filenames, allowing arbitrary file overwrite |
2024-01-16 | |
| GHSA-pp74-39w2-v4w9 | CVE-2021-31154 | HIGH | - |
Permissions bypass in pleaser |
2023-04-03 |
| GHSA-4gh8-x3vv-phhg | CVE-2021-29499 | HIGH |
Predictable SIF UUID Identifiers in github.com/sylabs/sif |
2023-01-10 | |
| GHSA-2cc5-23r7-vc4v | CVE-2021-29480 | MODERATE |
Ratpack's default client side session signing key is highly predictable |
2022-08-11 |