CWE-329
Generation of Predictable IV with CBC Mode
The product generates and uses a predictable initialization Vector (IV) with Cipher Block Chaining (CBC) Mode, which causes algorithms to be susceptible to dictionary attacks when they are encrypted under the same key.
Impactr finds and proves whether CWE-329 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.