OWASP Top Ten 2017 Category A6 - Security Misconfiguration

Opis

Weaknesses in this category are related to the A6 category in the OWASP Top Ten 2017.

Wpisy w tej grupie

• CWE-16 Configuration
• CWE-209 Generation of Error Message Containing Sensitive Information
• CWE-548 Exposure of Information Through Directory Listing

Uwagi

While the OWASP document maps to CWE-2 and CWE-388, these are not appropriate for mapping, as they are high-level categories that are only intended for the Seven Pernicious Kingdoms view (CWE-700).

Źródła