Identify Actors

Opis

Weaknesses in this category are related to the design and architecture of a system's identification management components. Frequently these deal with verifying that external agents provide inputs into the system. The weaknesses in this category could lead to a degradation of the quality of identification management if they are not addressed when designing or implementing a secure architecture.

Wpisy w tej grupie

• CWE-295 Improper Certificate Validation
• CWE-296 Improper Following of a Certificate's Chain of Trust
• CWE-297 Improper Validation of Certificate with Host Mismatch
• CWE-298 Improper Validation of Certificate Expiration
• CWE-299 Improper Check for Certificate Revocation
• CWE-345 Insufficient Verification of Data Authenticity
• CWE-346 Origin Validation Error
• CWE-370 Missing Check for Certificate Revocation after Initial Check
• CWE-441 Unintended Proxy or Intermediary ('Confused Deputy')
• CWE-599 Missing Validation of OpenSSL Certificate
• CWE-940 Improper Verification of Source of a Communication Channel
• CWE-941 Incorrectly Specified Destination in a Communication Channel

Źródła