OWASP Top Ten 2025 Category A09:2025 - Logging & Alerting Failures

Opis

Weaknesses in this category are related to the A09 category "Logging & Alerting Failures" in the OWASP Top Ten 2025.

Wpisy w tej grupie

• CWE-117 Improper Output Neutralization for Logs
• CWE-221 Information Loss or Omission
• CWE-223 Omission of Security-relevant Information
• CWE-532 Insertion of Sensitive Information into Log File
• CWE-778 Insufficient Logging

Uwagi

As of CWE 4.19, the relationships in this category were pulled directly from the CWE mappings cited in the 2025 OWASP Top Ten. These mappings include categories, which are discouraged for mapping, as well as high-level weaknesses such as Pillars. The CWE Program will work with OWASP to improve these mappings, possibly requiring modifications to CWE itself.

Źródła