CWE-1402 · Kategoria
Comprehensive Categorization: Encryption
- Status
- Niekompletny
- Dodano
- 25 kwietnia 2023
- Ostatnia zmiana
- 3 kwietnia 2025
Opis
Weaknesses in this category are related to encryption.
Wpisy w tej grupie
- CWE-5 J2EE Misconfiguration: Data Transmission Without Encryption
- CWE-311 Missing Encryption of Sensitive Data
- CWE-312 Cleartext Storage of Sensitive Information
- CWE-313 Cleartext Storage in a File or on Disk
- CWE-314 Cleartext Storage in the Registry
- CWE-315 Cleartext Storage of Sensitive Information in a Cookie
- CWE-316 Cleartext Storage of Sensitive Information in Memory
- CWE-317 Cleartext Storage of Sensitive Information in GUI
- CWE-318 Cleartext Storage of Sensitive Information in Executable
- CWE-319 Cleartext Transmission of Sensitive Information
- CWE-324 Use of a Key Past its Expiration Date
- CWE-325 Missing Cryptographic Step
- CWE-326 Inadequate Encryption Strength
- CWE-327 Use of a Broken or Risky Cryptographic Algorithm
- CWE-328 Use of Weak Hash
- CWE-347 Improper Verification of Cryptographic Signature
- CWE-614 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
- CWE-759 Use of a One-Way Hash without a Salt
- CWE-760 Use of a One-Way Hash with a Predictable Salt
- CWE-780 Use of RSA Algorithm without OAEP
- CWE-916 Use of Password Hash With Insufficient Computational Effort
- CWE-1240 Use of a Cryptographic Primitive with a Risky Implementation
- CWE-1428 Reliance on HTTP instead of HTTPS
Źródła
Wpis z katalogu CWE 4.20.