static key / global shared key -- "global shared
key" - product uses same SSL key for all installations, allowing attackers
to eavesdrop or hijack session.
static key / global shared key -- Product uses
default WEP key when not connected to a known or trusted network, which can
cause it to automatically connect to a malicious network. Overlaps:
default.
Exposed or accessible private key (overlaps
information leak) -- Crypto program imports both public and private keys but
does not tell the user about the private keys, possibly breaking the web of
trust.
Misc -- Encryption product accidentally selects
the wrong key if the key doesn't have additional fields that are normally
expected, leading to infoleak to the owner of that wrong
key
Description
