CWE-1418 · Kategoria
Comprehensive Categorization: Violation of Secure Design Principles
- Status
- Niekompletny
- Dodano
- 25 kwietnia 2023
- Ostatnia zmiana
- 29 czerwca 2023
Opis
Weaknesses in this category are related to violation of secure design principles.
Wpisy w tej grupie
- CWE-250 Execution with Unnecessary Privileges
- CWE-424 Improper Protection of Alternate Path
- CWE-447 Unimplemented or Unsupported Feature in UI
- CWE-636 Not Failing Securely ('Failing Open')
- CWE-637 Unnecessary Complexity in Protection Mechanism (Not Using 'Economy of Mechanism')
- CWE-638 Not Using Complete Mediation
- CWE-653 Improper Isolation or Compartmentalization
- CWE-654 Reliance on a Single Factor in a Security Decision
- CWE-655 Insufficient Psychological Acceptability
- CWE-656 Reliance on Security Through Obscurity
- CWE-657 Violation of Secure Design Principles
- CWE-671 Lack of Administrator Control over Security
- CWE-1189 Improper Isolation of Shared Resources on System-on-a-Chip (SoC)
- CWE-1192 Improper Identifier for IP Block used in System-On-Chip (SOC)
- CWE-1303 Non-Transparent Sharing of Microarchitectural Resources
- CWE-1331 Improper Isolation of Shared Resources in Network On Chip (NoC)
- CWE-1395 Dependency on Vulnerable Third-Party Component
Źródła
Wpis z katalogu CWE 4.20.