gitlab.bandit.B304-6

385
Download Count*
License

Detected RC4 cipher algorithm which is considered insecure. The algorithm has many known vulnerabilities. Use AES instead.

Run Locally

Run in CI

Defintion

rules:
  - id: bandit.B304-6
    patterns:
      - pattern-either:
          - pattern: Cryptodome.Cipher.ARC4.new(...)
          - pattern: Crypto.Cipher.ARC4.new(...)
    message: >
      Detected RC4 cipher algorithm which is considered insecure. The algorithm
      has many

      known vulnerabilities. Use AES instead.
    metadata:
      cwe: "CWE-327: Use of a Broken or Risky Cryptographic Algorithm"
      owasp: "A3: Sensitive Data Exposure"
      primary_identifier: bandit.B304-6
      secondary_identifiers:
        - name: Bandit Test ID B304
          type: bandit_test_id
          value: B304
      license: MIT
    severity: WARNING
    languages:
      - python