OWASP Top Ten 2021 Category A09:2021 - Security Logging and Monitoring Failures

Opis

Weaknesses in this category are related to the A09 category "Security Logging and Monitoring Failures" in the OWASP Top Ten 2021.

Wpisy w tej grupie

• CWE-117 Improper Output Neutralization for Logs
• CWE-223 Omission of Security-relevant Information
• CWE-532 Insertion of Sensitive Information into Log File
• CWE-778 Insufficient Logging

Uwagi

As of CWE 4.6, the relationships in this category were pulled directly from the CWE mappings cited in the 2021 OWASP Top Ten. The CWE Program will work with OWASP to improve these mappings, possibly requiring modifications to CWE itself.

Źródła