CWE-1413 · Kategoria
Comprehensive Categorization: Protection Mechanism Failure
- Status
- Niekompletny
- Dodano
- 25 kwietnia 2023
- Ostatnia zmiana
- 3 kwietnia 2025
Opis
Weaknesses in this category are related to protection mechanism failure.
Wpisy w tej grupie
- CWE-182 Collapse of Data into Unsafe Value
- CWE-184 Incomplete List of Disallowed Inputs
- CWE-222 Truncation of Security-relevant Information
- CWE-223 Omission of Security-relevant Information
- CWE-224 Obscured Security-relevant Information by Alternate Name
- CWE-356 Product UI does not Warn User of Unsafe Actions
- CWE-357 Insufficient UI Warning of Dangerous Operations
- CWE-450 Multiple Interpretations of UI Input
- CWE-602 Client-Side Enforcement of Server-Side Security
- CWE-693 Protection Mechanism Failure
- CWE-757 Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')
- CWE-778 Insufficient Logging
- CWE-807 Reliance on Untrusted Inputs in a Security Decision
- CWE-1039 Inadequate Detection or Handling of Adversarial Input Perturbations in Automated Recognition Mechanism
- CWE-1248 Semiconductor Defects in Hardware Logic with Security-Sensitive Implications
- CWE-1253 Incorrect Selection of Fuse Values
- CWE-1269 Product Released in Non-Release Configuration
- CWE-1278 Missing Protection Against Hardware Reverse Engineering Using Integrated Circuit (IC) Imaging Techniques
- CWE-1291 Public Key Re-Use for Signing both Debug and Production Code
- CWE-1318 Missing Support for Security Features in On-chip Fabrics or Buses
- CWE-1319 Improper Protection against Electromagnetic Fault Injection (EM-FI)
- CWE-1326 Missing Immutable Root of Trust in Hardware
- CWE-1338 Improper Protections Against Hardware Overheating
- CWE-1429 Missing Security-Relevant Feedback for Unexecuted Operations in Hardware Interface
Źródła
Wpis z katalogu CWE 4.20.