Skip to content
ImpactrStart an engagement

CWE-337

Predictable Seed in Pseudo-Random Number Generator (PRNG)

A Pseudo-Random Number Generator (PRNG) is initialized from a predictable seed, such as the process ID or system time.

Impactr finds and proves whether CWE-337 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.