SEI CERT Oracle Secure Coding Standard for Java - Guidelines 49. Miscellaneous (MSC)

Opis

Weaknesses in this category are related to the rules and recommendations in the Miscellaneous (MSC) section of the SEI CERT Oracle Secure Coding Standard for Java.

Wpisy w tej grupie

• CWE-259 Use of Hard-coded Password
• CWE-311 Missing Encryption of Sensitive Data
• CWE-327 Use of a Broken or Risky Cryptographic Algorithm
• CWE-330 Use of Insufficiently Random Values
• CWE-332 Insufficient Entropy in PRNG
• CWE-336 Same Seed in Pseudo-Random Number Generator (PRNG)
• CWE-337 Predictable Seed in Pseudo-Random Number Generator (PRNG)
• CWE-400 Uncontrolled Resource Consumption
• CWE-401 Missing Release of Memory after Effective Lifetime
• CWE-770 Allocation of Resources Without Limits or Throttling
• CWE-798 Use of Hard-coded Credentials

Źródła