Limit Access

Opis

Weaknesses in this category are related to the design and architecture of system resources. Frequently these deal with restricting the amount of resources that are accessed by actors, such as memory, network connections, CPU or access points. The weaknesses in this category could lead to a degradation of the quality of authentication if they are not addressed when designing or implementing a secure architecture.

Wpisy w tej grupie

• CWE-201 Insertion of Sensitive Information Into Sent Data
• CWE-209 Generation of Error Message Containing Sensitive Information
• CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer
• CWE-243 Creation of chroot Jail Without Changing Working Directory
• CWE-250 Execution with Unnecessary Privileges
• CWE-610 Externally Controlled Reference to a Resource in Another Sphere
• CWE-611 Improper Restriction of XML External Entity Reference
• CWE-73 External Control of File Name or Path

Źródła