CWE-724 · Kategoria
OWASP Top Ten 2004 Category A3 - Broken Authentication and Session Management
- Status
- Przestarzały
- Dodano
- 15 sierpnia 2008
- Ostatnia zmiana
- 9 września 2025
Opis
Weaknesses in this category are related to the A3 category in the OWASP Top Ten 2004.
Wpisy w tej grupie
- CWE-255 Credentials Management Errors
- CWE-259 Use of Hard-coded Password
- CWE-287 Improper Authentication
- CWE-296 Improper Following of a Certificate's Chain of Trust
- CWE-298 Improper Validation of Certificate Expiration
- CWE-302 Authentication Bypass by Assumed-Immutable Data
- CWE-304 Missing Critical Step in Authentication
- CWE-307 Improper Restriction of Excessive Authentication Attempts
- CWE-309 Use of Password System for Primary Authentication
- CWE-345 Insufficient Verification of Data Authenticity
- CWE-384 Session Fixation
- CWE-521 Weak Password Requirements
- CWE-522 Insufficiently Protected Credentials
- CWE-525 Use of Web Browser Cache Containing Sensitive Information
- CWE-613 Insufficient Session Expiration
- CWE-620 Unverified Password Change
- CWE-640 Weak Password Recovery Mechanism for Forgotten Password
- CWE-798 Use of Hard-coded Credentials
Źródła
Wpis z katalogu CWE 4.20.