Verify Message Integrity

Opis

Weaknesses in this category are related to the design and architecture of a system's data integrity components. Frequently these deal with ensuring integrity of data, such as messages, resource files, deployment files, and configuration files. The weaknesses in this category could lead to a degradation of data integrity quality if they are not addressed when designing or implementing a secure architecture.

Wpisy w tej grupie

• CWE-353 Missing Support for Integrity Check
• CWE-354 Improper Validation of Integrity Check Value
• CWE-390 Detection of Error Condition Without Action
• CWE-391 Unchecked Error Condition
• CWE-494 Download of Code Without Integrity Check
• CWE-565 Reliance on Cookies without Validation and Integrity Checking
• CWE-649 Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking
• CWE-707 Improper Neutralization
• CWE-755 Improper Handling of Exceptional Conditions
• CWE-924 Improper Enforcement of Message Integrity During Transmission in a Communication Channel

Źródła