CWE-327 使用已被攻破或存在风险的密码学算法 类弱点 256 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-327指使用已损坏或存在风险加密算法的漏洞。攻击者常利用弱算法（如MD5、DES）破解数据，窃取敏感信息或篡改内容。开发者应避免使用已知不安全的算法，优先采用AES、SHA-256等现代标准，并定期审查加密实现，确保密钥管理安全，以保障数据机密性与完整性。
EVP_des_ecb();Cipher des=Cipher.getInstance("DES..."); des.initEncrypt(key2);The manufacturer chooses a SHA1 hardware accelerator for to implement the scheme because it already has a working SHA1 Intellectual Property (IP) that the manufacturer had created and used earlier, so this reuse of IP saves design cost.The manufacturer could have chosen a cryptographic solution that is recommended by the wide security community (including standard-setting bodies like NIST) and is not expected to be broken (or even better, weakened) within the reasonable life expectancy of the hardware product. In this case, the architects could have used SHA-2 or SHA-3, even if it meant that such choice would cost extra.| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-28244 | Microsoft Windows Kerberos 安全漏洞 — Windows Server 2019 | 8.1 | High | 2023-04-11 |
| CVE-2023-28509 | Rocket Software UniData 和 UniVerse 加密问题漏洞 — UniData | 7.5 | - | 2023-03-29 |
| CVE-2023-22812 | Western Digital SanDisk PrivateAccess 加密问题漏洞 — PrivateAccess | 7.4 | High | 2023-03-24 |
| CVE-2023-23695 | Dell EMC Secure Connect Gateway 加密问题漏洞 — Secure Connect Gateway (SCG) 5.0 Appliance - SRS | 5.9 | Medium | 2023-02-17 |
| CVE-2022-22564 | Dell EMC Unity 加密问题漏洞 — Unity | 5.9 | Medium | 2023-02-14 |
| CVE-2022-34444 | Dell PowerScale OneFS 加密问题漏洞 — PowerScale OneFS | 5.9 | Medium | 2023-02-10 |
| CVE-2022-35720 | IBM Sterling External Authentication Server 加密问题漏洞 — Sterling External Authentication Server | 2.3 | Low | 2023-02-08 |
| CVE-2022-22462 | IBM Security Verify Governance 加密问题漏洞 — Security Verify Governance | 3.7 | Low | 2023-01-25 |
| CVE-2022-43917 | IBM WebSphere Application Server 加密问题漏洞 — WebSphere Application Server | 5.9 | Medium | 2023-01-25 |
| CVE-2023-0296 | etcd 加密问题漏洞 — Red Hat OpenShift | 5.3 | - | 2023-01-17 |
| CVE-2022-23539 | jsonwebtoken 加密问题漏洞 — node-jsonwebtoken | 5.9 | Medium | 2022-12-22 |
| CVE-2022-22461 | IBM Security Verify Governance 加密问题漏洞 — Security Verify Governance, Identity Manager | 5.9 | Medium | 2022-12-22 |
| CVE-2022-38391 | IBM Spectrum Control 加密问题漏洞 — Spectrum Control | 5.1 | Medium | 2022-12-20 |
| CVE-2022-27581 | SICK RFU61x 加密问题漏洞 — SICK RFU61x Firmware | 6.5 | - | 2022-12-13 |
| CVE-2022-46140 | Siemens部分产品 加密问题漏洞 — RUGGEDCOM RM1224 LTE(4G) EU | 6.5 | Medium | 2022-12-13 |
| CVE-2022-46832 | SICK RFU61x 加密问题漏洞 — SICK RFU62x Firmware | 6.5 | - | 2022-12-13 |
| CVE-2022-46833 | SICK RFU63x 加密问题漏洞 — SICK RFU63x Firmware | 6.5 | - | 2022-12-13 |
| CVE-2022-46834 | SICK RFU61x 加密问题漏洞 — SICK RFU65x Firmware | 6.5 | - | 2022-12-13 |
| CVE-2022-34361 | IBM Sterling Secure Proxy 加密问题漏洞 — Sterling Secure Proxy | 5.9 | Medium | 2022-12-06 |
| CVE-2022-34320 | IBM CICS TX 加密问题漏洞 — CICS TX | 5.9 | Medium | 2022-11-14 |
| CVE-2022-34319 | IBM CICS TX 加密问题漏洞 — CICS TX | 5.9 | Medium | 2022-11-14 |
| CVE-2021-27784 | HCL Technologies HCL Launch 加密问题漏洞 — HCL Launch | 5.9 | Medium | 2022-10-31 |
| CVE-2021-3979 | Red Hat Ceph Storage 授权问题漏洞 — ceph | 4.0 | - | 2022-08-25 |
| CVE-2022-31157 | LTI 1.3 Tool Library 安全特征问题漏洞 — lti-1-3-php-library | 7.5 | High | 2022-07-15 |
| CVE-2022-34757 | Schneider Electric Easergy P5 加密问题漏洞 — Easergy P5 | 6.7 | Medium | 2022-07-13 |
| CVE-2022-31230 | Dell PowerScale OneFS 加密问题漏洞 — PowerScale OneFS | 8.1 | High | 2022-06-28 |
| CVE-2022-29249 | JavaEZ 加密问题漏洞 — JavaEZ | 7.5 | High | 2022-05-24 |
| CVE-2022-29217 | Python 加密问题漏洞 — pyjwt | 7.4 | High | 2022-05-24 |
| CVE-2022-29161 | XWiki 加密问题漏洞 — xwiki-platform | 5.4 | Medium | 2022-05-05 |
| CVE-2022-22559 | Dell Technologies Dell PowerScale OneFS 加密问题漏洞 — PowerScale OneFS | 7.5 | High | 2022-04-12 |
CWE-327（使用已被攻破或存在风险的密码学算法） 是常见的弱点类别，本平台收录该类弱点关联的 256 条 CVE 漏洞。