CWE-723 · Kategoria
OWASP Top Ten 2004 Category A2 - Broken Access Control
- Status
- Przestarzały
- Dodano
- 15 sierpnia 2008
- Ostatnia zmiana
- 9 września 2025
Opis
Weaknesses in this category are related to the A2 category in the OWASP Top Ten 2004.
Wpisy w tej grupie
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- CWE-266 Incorrect Privilege Assignment
- CWE-268 Privilege Chaining
- CWE-275 Permission Issues
- CWE-283 Unverified Ownership
- CWE-284 Improper Access Control
- CWE-285 Improper Authorization
- CWE-330 Use of Insufficiently Random Values
- CWE-41 Improper Resolution of Path Equivalence
- CWE-425 Direct Request ('Forced Browsing')
- CWE-525 Use of Web Browser Cache Containing Sensitive Information
- CWE-551 Incorrect Behavior Order: Authorization Before Parsing and Canonicalization
- CWE-556 ASP.NET Misconfiguration: Use of Identity Impersonation
- CWE-639 Authorization Bypass Through User-Controlled Key
- CWE-708 Incorrect Ownership Assignment
- CWE-73 External Control of File Name or Path
- CWE-9 J2EE Misconfiguration: Weak Access Permissions for EJB Methods
Źródła
Wpis z katalogu CWE 4.20.