Home / Vulnerability Database / VBScript : Insufficient encryption key length
VBScript

VBScript : Insufficient encryption key length

Overview

Short encryption key is used. Encryption is vulnerable to brute force attacks.

Due to constant development of new attack methods and increase in hardware performance, previously considered safe algorithms become obsolete. For example, 1024 bit RSA is considered insecure starting 2010 - 2015 (in various sources) and is no longer recommended to use.

In order to protect valuable data, use well tested implementations of standard encryption algorithms with sufficiently long keys.

Sensitive Data Exposure vulnerabilities take the third place in the “OWASP Top 10 2017” web-application vulnerabilities ranking.

CRITICAL

DerScanner Severity Score

Do you want to fix VBScript : Insufficient encryption key length in your application?

See also

VBScript

VBScript : Null encryption key

VBScript

VBScript : Empty encryption key

VBScript

VBScript : Unsafe padding