CWE-1240
Use of a Cryptographic Primitive with a Risky Implementation
To fulfill the need for a cryptographic primitive, the product implements a cryptographic algorithm using a non-standard, unproven, or disallowed/non-compliant cryptographic implementation.
Impactr finds and proves whether CWE-1240 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.