Cross Cutting

Opis

Weaknesses in this category are related to the design and architecture of multiple security tactics and how they affect a system. For example, information exposure can impact the Limit Access and Limit Exposure security tactics. The weaknesses in this category could lead to a degradation of the quality of many capabilities if they are not addressed when designing or implementing a secure architecture.

Wpisy w tej grupie

• CWE-208 Observable Timing Discrepancy
• CWE-392 Missing Report of Error Condition
• CWE-460 Improper Cleanup on Thrown Exception
• CWE-544 Missing Standardized Error Handling Mechanism
• CWE-602 Client-Side Enforcement of Server-Side Security
• CWE-703 Improper Check or Handling of Exceptional Conditions
• CWE-754 Improper Check for Unusual or Exceptional Conditions
• CWE-784 Reliance on Cookies without Validation and Integrity Checking in a Security Decision
• CWE-807 Reliance on Untrusted Inputs in a Security Decision

Źródła