All rules →
Rules / C#
SHIELD-CSHARP-016

Insecure random used for security tokens

mediumC#CWE-338CVSS 6.5

What it detects

System.Random is used to generate values that appear to be security tokens or keys.

How to fix

Use RandomNumberGenerator or RNGCryptoServiceProvider for security-sensitive random values.

Scan your repo freeFull documentation
Back to all rules
SHIELD-CSHARP-016: Insecure random used for security tokens — Zennoxa Shield