CWEweakness
CWE-780 Use of RSA Algorithm without OAEP
Medium
Official page ↗
- Abstraction
- Variant
- Structure
- Simple
- Status
- Incomplete
- Likelihood of exploit
- Medium
- Languages
- Not Language-Specific
- CWE version
- 5.0
Description
The product uses the RSA algorithm but does not incorporate Optimal Asymmetric Encryption Padding (OAEP).
Common consequences
• Access Control: Bypass Protection Mechanism — Without using OAEP, this might weaken the encryption. It will take less work for an attacker to decrypt the data or to infer patterns from the ciphertext.
Detection methods
• Automated Static Analysis: Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without having to execute it. Typically, this is done by building a model of data flow and control flow, then searching for potentially-vulnerable patterns that connect "sources" (origins of input) with "sinks" (destinations where the data interacts with external components, a lower layer such as the OS, etc.)
Related
Child of · CWE (1)
- CWE-327 Use of a Broken or Risky Cryptographic Algorithm weakness
Referenced by CVE · weakness (3)
- CVE-2025-9071 Erroneously using an all-zero seed for RSA-OEAP padding instead of the generated random bytes, in Oberon microsystems AG’s Oberon PSA… vulnerability
- CVE-2024-51456 IBM Robotic Process Automation 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 could allow a remote attacker to obtain sensitive data… vulnerability
- CVE-2022-40722 A misconfiguration of RSA padding implemented in the PingID Adapter for PingFederate to support Offline MFA with PingID mobile… vulnerability