All rules →
Rules / Java
SHIELD-JAVA-008

Weak Cipher Algorithm

highJavaCWE-327CVSS 7.5

What it detects

Cipher.getInstance using DES, RC4, or ECB mode provides inadequate confidentiality.

How to fix

Use AES in GCM or another authenticated mode with a securely managed key.

Scan your repo freeFull documentation
Back to all rules
SHIELD-JAVA-008: Weak Cipher Algorithm — Zennoxa Shield