CWE-329.

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly handle decryption errors and allows encrypted volumes to be mounted as plaintext.

• CWE-329
• CWE-703

389-ds-base: 389-ds-base: static initialization vector in aes-cbc/3des-cbc attribute encryption

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• CWE-329

Minosoft has IV equal to key

• Bixilon Minosoft
• CWE-329

electerm's encrypt method not safe enough

• Weak cryptography or TLS
• CWE-329

<3.9.5 · fixed in 3.9.5

Keylime has a hardcoded attestation challenge nonce that allows replay attacks

• Authentication bypass
• CWE-329

>=7.14.0, <7.14.2 · fixed in 7.14.2

IBM OpenPages with Watson information disclosure

• IBM OpenPages with Watson
• CWE-329

Crypt::CBC versions between 1.21 and 3.05 for Perl may use insecure rand() function for cryptographic functions

• LDS Crypt::CBC
• Weak cryptography or TLS
• CWE-329

FP.io VPP (Vector Packet Processor) 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01, 19.08, and 19.04 Generates a Predictable IV with CBC Mode.

• CWE-329

Fortinet FortiOS: A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the…

• Fortinet FortiOS
• Fortinet FortiProxy
• CWE-329

Ypsomed mylife Cloud, mylife Mobile Application: Ypsomed mylife Cloud, mylife Mobile Application…

• Ypsomed mylife Cloud, mylife Mobile Application
• CWE-329

Insufficient Entropy in Spring Security

• Weak cryptography or TLS
• CWE-329

>=5.3.0, <5.3.2 || >=5.2.0, <5.2.4 || >=5.1.0, <5.1.10 || >=5.0.0, <5.0.16 || <4.2.16 · fixed in 5.3.2, 5.2.4, 5.1.10, 5.0.16, 4.2.16

Das U-Boot's AES-CBC encryption feature improperly handles an error condition and may allow attacks against the underlying cryptographic implementation and allow an attacker to decrypt the data

• Das U-Boot
• CWE-329

Das U-Boot's AES-CBC encryption feature uses a zero (0) initialization vector that may allow attacks against the underlying cryptographic implementation and allow an attacker to decrypt the data

• Das U-Boot
• CWE-329

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a pad…

• CWE-329

Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.…

• CWE-329