# CWE-325.

Every Advisory and CVE whose sources give the weakness CWE-325, newest first.

## Records, newest first (an older page)

- [Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPsec IKEv2 VPN Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2022-20742.md)
  `CVE-2022-20742` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software · CVSS 7.4 High · Not analysed yet · Published 3 May 2022 · Tags: CWE-325
- [Insecure EBICS messages encryption implementation in ebics-java/ebics-java-client could allow an adjacent attacker to decrypt EBICS payloads](https://agentprime.io/advisories/CVE-2022-1279.md)
  `CVE-2022-1279` · CVE record: ebics-java ebics-java-client · CVSS 6.5 Medium · Not analysed yet · Published 14 Apr 2022 · Tags: CWE-325
- [Junos OS: When using J-Web with HTTP an attacker may retrieve encryption keys via Person-in-the-Middle attacks.](https://agentprime.io/advisories/CVE-2021-31386.md)
  `CVE-2021-31386` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 19 Oct 2021 · Tags: Weak cryptography or TLS, CWE-300, CWE-325, CWE-693
- [Cleartext transmission of sensitive information in https\://github.com/curl/curl](https://agentprime.io/advisories/CVE-2021-22946.md)
  `CVE-2021-22946` · CVE record: https\://github.com/curl/curl · CVSS 7.5 High · Not analysed yet · Published 29 Sept 2021 · Tags: Weak cryptography or TLS, CWE-325
- [Inadequate Encryption Strength in showdoc](https://agentprime.io/advisories/GHSA-8vh3-29mr-m9xg.md)
  `GHSA-8vh3-29mr-m9xg`, `CVE-2021-3680`, `PKSA-b6nc-w1hf-vxyh` · Packagist `showdoc/showdoc`: affected `<=2.9.8`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 1 Sept 2021 · Tags: Weak cryptography or TLS, CWE-325
- [Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm, and the window size is not chosen app…](https://agentprime.io/advisories/CVE-2021-33560.md)
  `CVE-2021-33560` · CVE record · CVSS 7.5 High · Not analysed yet · Published 8 Jun 2021 · Tags: CWE-325
- [Multiple cryptographic issues in Python oic](https://agentprime.io/advisories/GHSA-4fjv-pmhg-3rfg.md)
  `GHSA-4fjv-pmhg-3rfg`, `CVE-2020-26244`, `PYSEC-2020-69` · PyPI `oic`: affected `<1.2.1`, fixed in `1.2.1` · CVSS 6.8 Medium · Not analysed yet · Published 4 Dec 2020 · Tags: Weak cryptography or TLS, CWE-325
- [Missing Required Cryptographic Step Leading to Sensitive Information Disclosure in TYPO3 CMS](https://agentprime.io/advisories/GHSA-m5vr-3m74-jwxp.md)
  `GHSA-m5vr-3m74-jwxp`, `BIT-typo3-2020-15098`, `CVE-2020-15098`, `PKSA-89kh-571y-53vr`, `PKSA-d1gc-jvn6-g46m` · Packagist `typo3/cms` and 1 more: affected `>=9.0.0, <9.5.20 || >=10.0.0, <10.4.6`, fixed in `9.5.20`, `10.4.6` · CVSS 8.8 High · Not analysed yet · Published 29 Jul 2020 · Tags: Information disclosure, Weak cryptography or TLS, Insecure deserialization, CWE-20
- [Potential Remote Code Execution in TYPO3 with mediace extension](https://agentprime.io/advisories/GHSA-4h44-w6fm-548g.md)
  `GHSA-4h44-w6fm-548g`, `CVE-2020-15086`, `PKSA-h7r9-7xjm-kxrb` · Packagist `friendsoftypo3/mediace`: affected `>=7.6.2, <7.6.5`, fixed in `7.6.5` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jul 2020 · Tags: Information disclosure, Insecure deserialization, CWE-20, CWE-325
- [qemu: A flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth)…](https://agentprime.io/advisories/CVE-2020-10702.md)
  `CVE-2020-10702` · CVE record: The QEMU Project qemu · CVSS 5.5 Medium · Not analysed yet · Published 4 Jun 2020 · Tags: CWE-325
- [Dell RSA BSAFE Crypto-J: RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required…](https://agentprime.io/advisories/CVE-2019-3738.md)
  `CVE-2019-3738` · CVE record: Dell RSA BSAFE Crypto-J · CVSS 6.5 Medium · Not analysed yet · Published 18 Sept 2019 · Tags: CWE-325
- [Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchange](https://agentprime.io/advisories/CVE-2018-5383.md)
  `CVE-2018-5383` · CVE record: Apple macOS and 2 more · CVSS 8.0 High · Not analysed yet · Published 7 Aug 2018 · Tags: CWE-325
- [\[UNKNOWN\] nss: nss before version 3.30 is vulnerable to a remote denial of service during the session…](https://agentprime.io/advisories/CVE-2016-9574.md)
  `CVE-2016-9574` · CVE record: \[UNKNOWN\] nss · CVSS 5.9 Medium · Not analysed yet · Published 19 Jul 2018 · Tags: CWE-325

Newest: <https://agentprime.io/advisories/tag/cwe-325.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-325&cursor=WyIyMDIyLTA1LTEzVDAxOjM2OjU0LjAwMDAwMFoiLCJHSFNBLXg1NXAtNjUyNi14bW1wIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-325/?cursor=WyIyMDIyLTA1LTEzVDAxOjM2OjU0LjAwMDAwMFoiLCJHSFNBLXg1NXAtNjUyNi14bW1wIl0>. Everything for agents: <https://agentprime.io/llms.txt>.