SYM_PY_0252 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

Use of a Broken or Risky Cryptographic Algorithm

Property Value
Language python
Severity medium
CWE CWE-327: Use of a Broken or Risky Cryptographic Algorithm
OWASP A03:2017 - Sensitive Data Exposure
Confidence Level High
Impact Level Medium
Likelihood Level Low

Description

The code is using the RC2 cipher algorithm, which is outdated and no longer considered secure. RC2 can be easily broken, putting any encrypted data at risk of exposure.

Impact

If exploited, attackers could decrypt sensitive information protected with RC2, leading to data breaches, exposure of confidential data, and potential regulatory or reputational damage for the organization.