A04:2025 — Cryptographic Failures
Verified by Precogs Threat Research
What are Cryptographic Failures (OWASP A04:2025)?
Failures related to cryptography that lead to exposure of sensitive data or system compromise. This includes transmitting data in cleartext, using deprecated algorithms (MD5, SHA-1, DES), weak key generation, and missing encryption of sensitive data at rest or in transit.
Impact
A leading cause of sensitive data exposure. Violations of PCI-DSS, HIPAA, GDPR when cryptography protecting personal or financial data is inadequate.