CWE-325
Missing Cryptographic Step
The product does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than advertised by the algorithm.
Impactr finds and proves whether CWE-325 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.