Przejdź do treści
TechCalSecurity
CWECVE
Kalendarz ITO Autorze
Katalog CWE

CWE-1029 · Kategoria

OWASP Top Ten 2017 Category A3 - Sensitive Data Exposure

Status
Niekompletny
Dodano
22 stycznia 2018
Ostatnia zmiana
9 września 2025

Pełny wpis na cwe.mitre.org ↗

Opis

Weaknesses in this category are related to the A3 category in the OWASP Top Ten 2017.

Wpisy w tej grupie

  • CWE-220 Storage of File With Sensitive Data Under FTP Root
  • CWE-295 Improper Certificate Validation
  • CWE-311 Missing Encryption of Sensitive Data
  • CWE-312 Cleartext Storage of Sensitive Information
  • CWE-319 Cleartext Transmission of Sensitive Information
  • CWE-320 Key Management Errors
  • CWE-325 Missing Cryptographic Step
  • CWE-326 Inadequate Encryption Strength
  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm
  • CWE-328 Use of Weak Hash
  • CWE-359 Exposure of Private Personal Information to an Unauthorized Actor

Źródła

Wpis z katalogu CWE 4.20.

Dane CWE: MITRE·Dane CVE: NVD·This product uses the NVD API but is not endorsed or certified by the NVD.

© 2026 Jakub Krajewski·Polityka prywatności·CWE™ i CVE® są znakami towarowymi The MITRE Corporation.

CWE content: Copyright © 2006–2026, The MITRE Corporation. CWE™ is free to use by any organization or individual for any research, development, and/or commercial purposes, per these CWE Terms of Use. Accordingly, The MITRE Corporation hereby grants you a non-exclusive, royalty-free license to use CWE for research, development, and commercial purposes. Any copy you make for such purposes is authorized on the condition that you reproduce MITRE’s copyright designation and this license in any such copy. CWE is a trademark of The MITRE Corporation. Please contact cwe@mitre.org if you require further clarification on this issue. CWE Terms of Use