Home / Vulnerability Database / VBScript : Insufficient encryption key length
VBScript
VBScript : Insufficient encryption key length
Classification
OWASP Top 10 2013
OWASP Top 10 2017
OWASP Top 10 2021
OWASP MASVS
HIPAA
Overview
Short encryption key is used. Encryption is vulnerable to brute force attacks.
Due to constant development of new attack methods and increase in hardware performance, previously considered safe algorithms become obsolete. For example, 1024 bit RSA is considered insecure starting 2010 - 2015 (in various sources) and is no longer recommended to use.
In order to protect valuable data, use well tested implementations of standard encryption algorithms with sufficiently long keys.
Sensitive Data Exposure vulnerabilities take the third place in the “OWASP Top 10 2017” web-application vulnerabilities ranking.
CRITICAL
DerScanner Severity Score
Do you want to fix VBScript : Insufficient encryption key length in your application?
See also
VBScript
VBScript : Null encryption key
VBScript
VBScript : Empty encryption key
VBScript
