Data Integrity Issues

Opis

Weaknesses in this category are related to a software system's data integrity components. Frequently these deal with the ability to ensure the integrity of data, such as messages, resource files, deployment files, and configuration files. The weaknesses in this category could lead to a degradation of data integrity quality if they are not addressed.

Wpisy w tej grupie

• CWE-322 Key Exchange without Entity Authentication
• CWE-346 Origin Validation Error
• CWE-347 Improper Verification of Cryptographic Signature
• CWE-348 Use of Less Trusted Source
• CWE-349 Acceptance of Extraneous Untrusted Data With Trusted Data
• CWE-351 Insufficient Type Distinction
• CWE-353 Missing Support for Integrity Check
• CWE-354 Improper Validation of Integrity Check Value
• CWE-494 Download of Code Without Integrity Check
• CWE-565 Reliance on Cookies without Validation and Integrity Checking
• CWE-649 Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking
• CWE-829 Inclusion of Functionality from Untrusted Control Sphere
• CWE-924 Improper Enforcement of Message Integrity During Transmission in a Communication Channel