CWE-1204
Generation of Weak Initialization Vector (IV)
The product uses a cryptographic primitive that uses an Initialization Vector (IV), but the product does not generate IVs that are sufficiently unpredictable or unique according to the expected cryptographic requirements for that primitive.
Impactr finds and proves whether CWE-1204 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.