Audit / Logging Errors

Opis

Weaknesses in this category are related to audit-based components of a software system. Frequently these deal with logging user activities in order to identify undesired access and modifications to the system. The weaknesses in this category could lead to a degradation of the quality of the audit capability if they are not addressed.

Wpisy w tej grupie

• CWE-117 Improper Output Neutralization for Logs
• CWE-222 Truncation of Security-relevant Information
• CWE-223 Omission of Security-relevant Information
• CWE-224 Obscured Security-relevant Information by Alternate Name
• CWE-778 Insufficient Logging
• CWE-779 Logging of Excessive Data