Using insecure cryptographic algorithms or configurations introduces vulnerabilities in applications. This includes weak ciphers like RC4 or DES, ECB mode, no integrity checking, insufficient key sizes, and other known cryptographic weaknesses. Modern secure ciphers like AES-GCM and recommended key sizes should be used instead. Following cryptography best practices is essential to prevent confidentiality and integrity loss.

Insecure Cryptography

Padding schemes are often used with cryptographic algorithms to make the plaintext less predictable and complicate attack efforts. The OAEP scheme is often used with RSA to nullify the impact of predictable common text.

Use Of RSA Algorithm

RSA algorithm does not incorporate Optimal Asymmetric Encryption Padding (OAEP), which might weaken the encryption.

Array Index Validation Failure occurs when software doesn't properly validate array index values, allowing attackers to execute code or cause a denial of service. This can lead to buffer overflow or program instability.

Improper Validation Of Array Index

Array Index Validation Failure enables attackers to execute code or cause a denial of service by manipulating array index values.

Q

Detector Library

Scala detectors (28/28)

Critical

Insecure Cryptography

Use Of RSA Algorithm

Improper Validation Of Array Index