static key / global shared key -- "global shared
key" - product uses same SSL key for all installations, allowing attackers
to eavesdrop or hijack session.
static key / global shared key -- Product uses
default WEP key when not connected to a known or trusted network, which can
cause it to automatically connect to a malicious network. Overlaps:
default.
Exposed or accessible private key (overlaps
information exposure) -- Crypto program imports both public and private keys
but does not tell the user about the private keys, possibly breaking the web
of trust.
Misc -- Encryption product accidentally selects
the wrong key if the key doesn't have additional fields that are normally
expected, allowing the owner of the wrong key to decrypt the
data.
Description
