Cryptographic Bill of Materials (CBOM) Vulnerabilities

Cryptographic Bill of Materials (CBOM) tracks the complete inventory of cryptographic assets in an application. Precogs AI detects weak ciphers, insufficient key lengths, hardcoded secrets, and expired certificates to ensure adherence to compliance standards.

Verified by Precogs Threat Research

What is a Cryptographic Bill of Materials (CBOM)?

A CBOM is a structured inventory that lists all cryptographic algorithms, keys, certificates, parameters, and protocols used within a software application. Because legacy ciphers (like 3DES or RC4) and weak key sizes (like RSA-1024) are continuously compromised, cataloging cryptographic usage is critical to maintaining a secure posture. A CBOM enables security teams to identify algorithm deprecations, hardcoded keys, cleartext transfers, and certificate expiration risks across the application codebase and dependencies.

Explore CBOM Security by Category

Deep-dive into specific areas of cbom security to understand the attack surfaces, common vulnerability patterns, and how Precogs AI provides protection.

By Cryptographic Component

Encryption Algorithms

Symmetric EncryptionRisks related to weak symmetric ciphers (3DES, RC4, Blowfish) and insecure block modes→Asymmetric EncryptionInadequate key sizes in RSA and ECC configurations making them vulnerable to factoring→

TLS & Key Management

TLS Cipher Suite AuditIdentifying weak or deprecated TLS ciphers in server configuration files→Hardcoded Private KeysExtracting and remediating hardcoded private SSH/TLS keys in binary artifacts→

Vulnerability Types

CWE-327

HIGH

Use of a Broken or Risky Cryptographic Algorithm

Using deprecated algorithms (such as MD5, SHA-1, DES, or RC4) compromises data confidentiality and integrity, failing co...

CWE-326

HIGH

Inadequate Encryption Strength

Using keys of insufficient size (e.g. RSA keys under 2048 bits or weak elliptic curves) allows attackers to perform cryp...

CWE-798

HIGH

Use of Hard-coded Credentials

Embedding authentication passwords, API tokens, or secrets directly in configuration files, scripts, or source code....

CWE-321

HIGH

Use of Hard-coded Cryptographic Key

Embedding private keys, symmetric keys, or certificates directly in compiled binaries. Reversed binaries will leak these...

Recently Discovered in CBOM Security

Browse the latest vulnerabilities and exposures dynamically tracked to the CBOM Security domain.

Compiling vulnerability feed...

Detect CBOM Security Vulnerabilities Automatically

Precogs AI scans your code and binaries for CBOM Security vulnerabilities and generates AutoFix PRs — no manual review needed.

Start Free ScanBook a demo