CWE-326
Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
Impactr finds and proves whether CWE-326 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.