Security

Predictable Identifier

A predictable identifier is a token, file name, session ID or record number that should be hard to guess but can be calculated or guessed, for example because it is sequential, time based or made by a weak generator. MITRE tracks the weakness as CWE-340.

Deep dive

Learn Article

What Is a Predictable Identifier Vulnerability?

A predictable identifier vulnerability lets attackers guess tokens, file names or IDs meant to be secret. How CWE-340 works and why low scores mislead.

beginner 5 min read

Back to glossary