7PK - Environment

Opis

This category represents one of the phyla in the Seven Pernicious Kingdoms vulnerability classification. It includes weaknesses that are typically introduced during unexpected environmental conditions. According to the authors of the Seven Pernicious Kingdoms, "This section includes everything that is outside of the source code but is still critical to the security of the product that is being created. Because the issues covered by this kingdom are not directly related to source code, we separated it from the rest of the kingdoms."

Wpisy w tej grupie

• CWE-11 ASP.NET Misconfiguration: Creating Debug Binary
• CWE-12 ASP.NET Misconfiguration: Missing Custom Error Page
• CWE-13 ASP.NET Misconfiguration: Password in Configuration File
• CWE-14 Compiler Removal of Code to Clear Buffers
• CWE-5 J2EE Misconfiguration: Data Transmission Without Encryption
• CWE-6 J2EE Misconfiguration: Insufficient Session-ID Length
• CWE-7 J2EE Misconfiguration: Missing Custom Error Page
• CWE-8 J2EE Misconfiguration: Entity Bean Declared Remote
• CWE-9 J2EE Misconfiguration: Weak Access Permissions for EJB Methods

Źródła