# CWE-310.

Every Advisory and CVE whose sources give the weakness CWE-310, newest first.

## Records, newest first (an older page)

- [Fortinet FortiNAC: Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1…](https://agentprime.io/advisories/CVE-2022-40675.md)
  `CVE-2022-40675` · CVE record: Fortinet FortiNAC · CVSS 6.0 Medium · Not analysed yet · Published 16 Feb 2023 · Tags: CWE-310
- [Click Studios Passwordstate risky encryption](https://agentprime.io/advisories/CVE-2022-4610.md)
  `CVE-2022-4610` · CVE record: Click Studios Passwordstate and 1 more · CVSS 1.9 Low · Not analysed yet · Published 19 Dec 2022 · Tags: CWE-310
- [whohas Package Information cleartext transmission](https://agentprime.io/advisories/CVE-2021-4258.md)
  `CVE-2021-4258` · CVE record: unspecified whohas · CVSS 3.7 Low · Not analysed yet · Published 19 Dec 2022 · Tags: CWE-310
- [Node: A cryptographic vulnerability exists on Node.js on linux in versions of 18.x prior to…](https://agentprime.io/advisories/CVE-2022-32222.md)
  `CVE-2022-32222` · CVE record: NodeJS Node · No CVSS score · Not analysed yet · Published 14 Jul 2022 · Tags: CWE-310
- [PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security key requests](https://agentprime.io/advisories/CVE-2022-23719.md)
  `CVE-2022-23719` · CVE record: Ping Identity PingID Windows Login · CVSS 7.2 High · Not analysed yet · Published 30 Jun 2022 · Tags: Authentication bypass, CWE-310
- [PingID Mac Login prior to 1.1 vulnerable to pre-computed dictionary attacks](https://agentprime.io/advisories/CVE-2021-41995.md)
  `CVE-2021-41995` · CVE record: Ping Identity PingID Mac Login · CVSS 7.7 High · Not analysed yet · Published 30 Jun 2022 · Tags: Authentication bypass, CWE-310
- [PingID Integration for Windows Login MFA Bypass](https://agentprime.io/advisories/CVE-2022-23724.md)
  `CVE-2022-23724` · CVE record: Ping Identity PingID Integration for Windows Login · CVSS 6.4 Medium · Not analysed yet · Published 4 May 2022 · Tags: Authentication bypass, CWE-310
- [PingID Desktop encryption libraries misconfiguration can lead to sensitive data exposure](https://agentprime.io/advisories/CVE-2021-42001.md)
  `CVE-2021-42001` · CVE record: Ping Identity PingID Desktop · CVSS 8.0 High · Not analysed yet · Published 30 Apr 2022 · Tags: CWE-310
- [PingID iOS mobile application prior to 1.19 vulnerable to pre-computed dictionary attacks](https://agentprime.io/advisories/CVE-2021-41994.md)
  `CVE-2021-41994` · CVE record: Ping Identity PingID Mobile Application · CVSS 6.6 Medium · Not analysed yet · Published 30 Apr 2022 · Tags: CWE-310
- [PingID Android mobile application prior to 1.19 vulnerable to pre-computed dictionary attacks](https://agentprime.io/advisories/CVE-2021-41993.md)
  `CVE-2021-41993` · CVE record: Ping Identity PingID Mobile Application · CVSS 6.6 Medium · Not analysed yet · Published 30 Apr 2022 · Tags: CWE-310
- [PingID Windows Login RSA cryptographic weakness with possible offline MFA bypass](https://agentprime.io/advisories/CVE-2021-41992.md)
  `CVE-2021-41992` · CVE record: Ping Identity PingID Windows Login · CVSS 7.7 High · Not analysed yet · Published 30 Apr 2022 · Tags: Authentication bypass, CWE-310
- [Security issues in AWS KMS and AWS Encryption SDKs: in-band protocol negotiation and robustness](https://agentprime.io/advisories/GHSA-wqgp-vphw-hphf.md)
  `GHSA-wqgp-vphw-hphf`, `CVE-2020-8897`, `PYSEC-2020-261` · Maven `com.amazonaws:aws-encryption-sdk-java` and 1 more: affected `<2.0.0`, fixed in `2.0.0` · CVSS 4.8 Medium · Not analysed yet · Published 12 Oct 2021 · Tags: Weak cryptography or TLS, CWE-310
- [When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back multiple responses at once that c…](https://agentprime.io/advisories/CVE-2021-22947.md)
  `CVE-2021-22947` · CVE record: https\://github.com/curl/curl · CVSS 5.9 Medium · Not analysed yet · Published 29 Sept 2021 · Tags: CWE-310
- [Man-in-the-middle attack in golang.org/x/crypto/ssh](https://agentprime.io/advisories/GHSA-xhjq-w7xm-p8qj.md)
  `GHSA-xhjq-w7xm-p8qj`, `CVE-2017-3204`, `GO-2020-0013` · Go `golang.org/x/crypto`: affected `<0.0.0-20170330155735-e4e2799dd7aa`, fixed in `0.0.0-20170330155735-e4e2799dd7aa` · No CVSS score · Not analysed yet · Published 14 Apr 2021 · Tags: CWE-310
- [Nextcloud Server: A cryptographic issue in Nextcloud Server 19.0.1 allowed an attacker to downgrade the…](https://agentprime.io/advisories/CVE-2020-8150.md)
  `CVE-2020-8150` · CVE record: Nextcloud Server · No CVSS score · Not analysed yet · Published 9 Nov 2020 · Tags: CWE-310
- [Nextcloud Server: A too small set of random characters being used for encryption in Nextcloud Server 18.0.4…](https://agentprime.io/advisories/CVE-2020-8173.md)
  `CVE-2020-8173` · CVE record: Nextcloud Server · No CVSS score · Not analysed yet · Published 30 Oct 2020 · Tags: CWE-310
- [Cisco Hyperflex HX-Series Software Weak Storage Vulnerability](https://agentprime.io/advisories/CVE-2020-3389.md)
  `CVE-2020-3389` · CVE record: Cisco Cisco HyperFlex HX Data Platform · CVSS 4.4 Medium · Not analysed yet · Published 26 Aug 2020 · Tags: CWE-310
- [Dell RSA BSAFE Crypto-C Micro Edition: RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.4 and RSA Micro Edition Suite…](https://agentprime.io/advisories/CVE-2019-3731.md)
  `CVE-2019-3731` · CVE record: Dell RSA BSAFE Crypto-C Micro Edition and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 30 Sept 2019 · Tags: CWE-310
- [Dell RSA BSAFE Crypto-J: RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure…](https://agentprime.io/advisories/CVE-2019-3740.md)
  `CVE-2019-3740` · CVE record: Dell RSA BSAFE Crypto-J · CVSS 6.5 Medium · Not analysed yet · Published 18 Sept 2019 · Tags: CWE-310
- [Dell RSA BSAFE Crypto-J: RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through…](https://agentprime.io/advisories/CVE-2019-3739.md)
  `CVE-2019-3739` · CVE record: Dell RSA BSAFE Crypto-J · CVSS 6.5 Medium · Not analysed yet · Published 18 Sept 2019 · Tags: CWE-310
- [Blutooth BR/EDR specification does not specify sufficient encryption key length and allows an attacker to influence key length negotiation](https://agentprime.io/advisories/CVE-2019-9506.md)
  `CVE-2019-9506` · CVE record: Bluetooth BR/EDR · CVSS 7.6 High · Not analysed yet · Published 14 Aug 2019 · Tags: CWE-310
- [Cisco Industrial Network Director Web Services Management Agent Unauthorized Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2019-1940.md)
  `CVE-2019-1940` · CVE record: Cisco Cisco Industrial Network Director · CVSS 5.3 Medium · Not analysed yet · Published 17 Jul 2019 · Tags: CWE-310
- [Siemens AG SIMATIC HMI Comfort Panels 4" - 22": A vulnerability has been identified in SIMATIC HMI Comfort Panels 4"…](https://agentprime.io/advisories/CVE-2019-6576.md)
  `CVE-2019-6576` · CVE record: Siemens AG SIMATIC HMI Comfort Panels 4" - 22" and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 May 2019 · Tags: CWE-310
- [Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Default SSH Key Vulnerability](https://agentprime.io/advisories/CVE-2019-1804.md)
  `CVE-2019-1804` · CVE record: Cisco Cisco NX-OS Software for Nexus 9000 Series Fabric Switches ACI Mode 11.0.1b · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 May 2019 · Tags: CWE-310
- [Cisco Systems, Inc. Small Business 100 Series Wireless…: A vulnerability in the implementation of Extensible Authentication Protocol over LAN…](https://agentprime.io/advisories/CVE-2018-0412.md)
  `CVE-2018-0412` · CVE record: Cisco Systems, Inc. Small Business 100 Series Wireless Access Points and 1 more · No CVSS score · Not analysed yet · Published 15 Aug 2018 · Tags: CWE-310
- [The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of Rights Block to remove or relax license requirement](https://agentprime.io/advisories/CVE-2017-13097.md)
  `CVE-2017-13097` · CVE record: IEEE Standard · No CVSS score · Not analysed yet · Published 13 Jul 2018 · Tags: CWE-310
- [The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of Rights Block to remove or relax access control](https://agentprime.io/advisories/CVE-2017-13096.md)
  `CVE-2017-13096` · CVE record: IEEE Standard · No CVSS score · Not analysed yet · Published 13 Jul 2018 · Tags: CWE-310
- [The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of a license-deny response to a license grant](https://agentprime.io/advisories/CVE-2017-13095.md)
  `CVE-2017-13095` · CVE record: IEEE Standard · No CVSS score · Not analysed yet · Published 13 Jul 2018 · Tags: CWE-310
- [The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of the encryption key and insertion of hardware trojans in any IP](https://agentprime.io/advisories/CVE-2017-13094.md)
  `CVE-2017-13094` · CVE record: IEEE Standard · No CVSS score · Not analysed yet · Published 13 Jul 2018 · Tags: CWE-310
- [The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including modification of encrypted IP cyphertext to insert hardware trojans](https://agentprime.io/advisories/CVE-2017-13093.md)
  `CVE-2017-13093` · CVE record: IEEE Standard · No CVSS score · Not analysed yet · Published 13 Jul 2018 · Tags: CWE-310
- [The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including improperly specified HDL syntax allows use of an EDA tool as a decryption oracle](https://agentprime.io/advisories/CVE-2017-13092.md)
  `CVE-2017-13092` · CVE record: IEEE Standard · No CVSS score · Not analysed yet · Published 13 Jul 2018 · Tags: CWE-310
- [The P1735 IEEE standard describes flawed methods for encrypting electronic-design intellectual property (IP), including improperly specified padding in CBC mode allows use of an EDA tool as a decrypt…](https://agentprime.io/advisories/CVE-2017-13091.md)
  `CVE-2017-13091` · CVE record: IEEE Standard · No CVSS score · Not analysed yet · Published 13 Jul 2018 · Tags: CWE-310
- [Cisco Firepower System Software: A vulnerability in the detection engine of Cisco Firepower System Software could allow an…](https://agentprime.io/advisories/CVE-2018-0283.md)
  `CVE-2018-0283` · CVE record: Cisco Firepower System Software · No CVSS score · Not analysed yet · Published 2 May 2018 · Tags: CWE-310
- [Cisco Firepower System Software: A vulnerability in the detection engine of Cisco Firepower System Software could allow an…](https://agentprime.io/advisories/CVE-2018-0281.md)
  `CVE-2018-0281` · CVE record: Cisco Firepower System Software · No CVSS score · Not analysed yet · Published 2 May 2018 · Tags: CWE-310
- [Philips IntelliSpace Portal: Philips IntelliSpace Portal all versions of 8.0.x…](https://agentprime.io/advisories/CVE-2018-5466.md)
  `CVE-2018-5466` · CVE record: Philips Philips IntelliSpace Portal · No CVSS score · Not analysed yet · Published 26 Mar 2018 · Tags: CWE-310
- [Philips IntelliSpace Portal: Philips IntelliSpace Portal all versions of 8.0.x…](https://agentprime.io/advisories/CVE-2018-5464.md)
  `CVE-2018-5464` · CVE record: Philips Philips IntelliSpace Portal · No CVSS score · Not analysed yet · Published 26 Mar 2018 · Tags: CWE-310
- [Philips IntelliSpace Portal: Philips IntelliSpace Portal all versions of 8.0.x…](https://agentprime.io/advisories/CVE-2018-5462.md)
  `CVE-2018-5462` · CVE record: Philips Philips IntelliSpace Portal · No CVSS score · Not analysed yet · Published 26 Mar 2018 · Tags: CWE-310
- [Philips IntelliSpace Portal: Philips IntelliSpace Portal all versions of 8.0.x…](https://agentprime.io/advisories/CVE-2018-5458.md)
  `CVE-2018-5458` · CVE record: Philips Philips IntelliSpace Portal · No CVSS score · Not analysed yet · Published 26 Mar 2018 · Tags: CWE-310
- [Cisco Firepower System Software: A vulnerability in the Secure Sockets Layer (SSL) Decryption and Inspection feature of…](https://agentprime.io/advisories/CVE-2017-6766.md)
  `CVE-2017-6766` · CVE record: Cisco Firepower System Software · No CVSS score · Not analysed yet · Published 7 Aug 2017 · Tags: CWE-310
- [Schneider Electric SCADA Expert ClearSCADA Cryptographic Issues](https://agentprime.io/advisories/CVE-2014-5413.md)
  `CVE-2014-5413` · CVE record: Schneider Electric ClearSCADA and 1 more · CVSS 6.4 Medium · Not analysed yet · Published 18 Sept 2014 · Tags: CWE-310

Newest: <https://agentprime.io/advisories/tag/cwe-310.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-310&cursor=WyIyMDIzLTAyLTIzVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMy0yMzkxOSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-310/?cursor=WyIyMDIzLTAyLTIzVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMy0yMzkxOSJd>. Everything for agents: <https://agentprime.io/llms.txt>.