CWE-334
Small Space of Random Values
The number of possible random values is smaller than needed by the product, making it more susceptible to brute force attacks.
Impactr finds and proves whether CWE-334 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.