7PK - Security Features

Opis

Software security is not security software. Here we're concerned with topics like authentication, access control, confidentiality, cryptography, and privilege management.

Wpisy w tej grupie

• CWE-256 Plaintext Storage of a Password
• CWE-258 Empty Password in Configuration File
• CWE-259 Use of Hard-coded Password
• CWE-260 Password in Configuration File
• CWE-261 Weak Encoding for Password
• CWE-272 Least Privilege Violation
• CWE-284 Improper Access Control
• CWE-285 Improper Authorization
• CWE-330 Use of Insufficiently Random Values
• CWE-359 Exposure of Private Personal Information to an Unauthorized Actor
• CWE-798 Use of Hard-coded Credentials

Źródła