CWE-1028 · Kategoria
OWASP Top Ten 2017 Category A2 - Broken Authentication
- Status
- Niekompletny
- Dodano
- 23 czerwca 2014
- Ostatnia zmiana
- 9 września 2025
Opis
Weaknesses in this category are related to the A2 category in the OWASP Top Ten 2017.
Wpisy w tej grupie
- CWE-287 Improper Authentication
- CWE-256 Plaintext Storage of a Password
- CWE-308 Use of Single-factor Authentication
- CWE-384 Session Fixation
- CWE-522 Insufficiently Protected Credentials
- CWE-523 Unprotected Transport of Credentials
- CWE-613 Insufficient Session Expiration
- CWE-620 Unverified Password Change
- CWE-640 Weak Password Recovery Mechanism for Forgotten Password
Źródła
Wpis z katalogu CWE 4.20.