By weakness (CWE)

CWE-329: related vulnerabilities

CVEs classified under CWE-329. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

2 published vulnerabilities

• CVE-2024-56141MEDIUM 5.0

  Minosoft, an open-source Minecraft Java Edition client, contains a cryptographic implementation flaw in its AES encryption routine. The application incorrectly uses the encryption key itself as the initialization vector (IV) instead of generating a random one. This design weakness allows attackers with network access and authenticated status to perform chosen-plaintext and chosen-ciphertext attacks, potentially recovering the secret encryption key. The vulnerability affects all Minosoft versions that support Minecraft protocol 1.7 and later. No patch has been released, and no workarounds currently exist.

• CVE-2026-14969MEDIUM 4.4

  A security issue has been discovered in 389 Directory Server (Red Hat's LDAP directory solution) where sensitive data stored in the database is encrypted using a method that doesn't change the encryption key's starting point between different entries. This means an attacker who can access the filesystem and has administrative privileges could potentially figure out when two encrypted database entries contain the same plaintext information by looking at the encrypted data patterns—a weakness that undermines the confidentiality protection encryption is meant to provide.