Fluid Attacks Database

Description

The application uses insecure encryption algorithms.

Impact

- Reverse the ciphertext and collect sensible information. - Tamper protected data by exploiting algorithm collisions.

Recommendation

Use algorithms considered cryptographically secure.

Threat

Anonymous attacker from adjacent network.

Expected Remediation Time

⏱️ 30 minutes.

Requirements

127 - Store hashed passwords 148 - Set minimum size of asymmetric encryption 149 - Set minimum size of symmetric encryption 150 - Set minimum size for hash functions 181 - Transmit data using secure protocols 336 - Disable insecure TLS versions

Rules

Ssl Tls Server Accepts Null Cipher Suite Ssl Tls Server Accepts Short Rsa Key Ssl Tls Server Accepts Weak Cipher Methods Go Insufficient Kdf Output Length Java Unsafe Jwt Decode Javascript Weak Rsa Modulus 1024 Kotlin Crypto Weak Key Size Typescript Insecure Ecdh Curve Go Insecure Hash Use Kotlin Hardcoded Signing Secret C Sharp Hardcoded Insecure Keys Scala Insecure Ec Key Scala Insecure Hash Algorithm Scala Insecure Cipher Mode Swift Weak Hash Algorithm C Sharp Weak Crypto Algorithm Javascript Weak Cipher Des Ecb Kotlin Hardcoded Encryption Key Go Weak Rsa Key Size Kotlin Static Iv Used Java Insecure Cipher Ssl Go Hardcoded Symmetric Key C Sharp Obsolete Key Derivation Php Weak Cipher Mcrypt Kotlin Insecure Cipher Mode Javascript Insecure Hash Sha1 Typescript Insecure Deprecated Encryption Dart Pointycastle Pbkdf2 Weak Iterations Scala Insecure Pass Generation Kotlin Insecure Key Generation Javascript Insecure Encryption Mode Typescript Allow Invalid Key Types Kotlin Weak Key Size Python Hardcoded Jwt Secret Java Weak Rsa Key Kotlin Insecure Hostname Verification Dart Pointycastle Pbkdf2 Weak Key Length Go Insecure Scrypt Parameters Python Insecure Hash Sha1 Usage Dart Cryptography Argon2 Weak Hash Length Java Insecure Signature Algorithm Go Pbkdf2 Insufficient Iteration Count C Sharp Insecure Cipher Algorithm Java Weak Cipher Suite Java Jwt Unsigned Token Javascript Weak Hash Md4 Java Insecure Cryptographic Algorithm Javascript Insecure Ec Curve Secp192k1 Go Deprecated Pemblock Encryption Functions Kotlin Hardcoded Iv Used Dart Cryptography Pbkdf2 Weak Key Length Php Insecure Openssl Cipher Dart Pointycastle Argon2 Weak Hash Length Swift Insecure Cryptor Usager C Sharp Rsa Secure Mode Dart Cryptography Argon2 Weak Memory Java Weak Crypto Algorithms Kotlin Insecure Certificate Validation Typescript Insecure Hash Sha1 Javascript Insecure Deprecated Encryption Python Unsafe Cipher Algorithm Or Mode Scala Jwt Without Proper Sign Kotlin Insecure Cipher Usage Properties Missing Ssl Configuration C Sharp Disabled Strong Crypto Python Insecure Aes Ecb Mode Java Insecure Ssl Protocol Typescript Insecure Hash Md4 Javascript Allow Invalid Key Types Java Insecure Cipher Mode Php Weak Encryption Size Go Deprecated Encryption Function Use Properties Weak Cipher Suite Dart Cryptography Pbkdf2 Weak Iterations Swift Insecure Cipher Usage Typescript Insecure Cipher Creation Typescript Insecure Rsa 1024 Dart Pointycastle Weak Rsa Key Size Go Insecure Cipher Usage C Sharp Insecure Hash Usage Typescript Weak Ec Curve Secp192k1 C Sharp Weak Rsa Encrypt Padding Java Insecure Cipher Usage Kotlin Insecure Key Pair Generation Go Insufficient Bcrypt Cost Dart Pointycastle Argon2 Weak Memory Dart Cryptography Weak Rsa Key Size Typescript Insecure Cipher Mode Java Allows Tls1 1 Kotlin Insecure Key Usage Kotlin Insecure Cipher Ssl Java Insecure Hash Algorithm Kotlin Insecure Hash Sha1 Java Weak Crypto Algorithms Used Swift Hardcoded Jwt Secret Javascript Insecure Ecdh Curve C Sharp Hardcoded Symmetric Key Java Insecure Key Rsa

Fixes

Csharp Dart Go Java JavaScript/TypeScript Php Python Ruby Scala Swift