CWE-731 · Kategoria
OWASP Top Ten 2004 Category A10 - Insecure Configuration Management
- Status
- Przestarzały
- Dodano
- 15 sierpnia 2008
- Ostatnia zmiana
- 9 września 2025
Opis
Weaknesses in this category are related to the A10 category in the OWASP Top Ten 2004.
Wpisy w tej grupie
- CWE-209 Generation of Error Message Containing Sensitive Information
- CWE-215 Insertion of Sensitive Information Into Debugging Code
- CWE-219 Storage of File with Sensitive Data Under Web Root
- CWE-275 Permission Issues
- CWE-295 Improper Certificate Validation
- CWE-5 J2EE Misconfiguration: Data Transmission Without Encryption
- CWE-555 J2EE Misconfiguration: Plaintext Password in Configuration File
- CWE-6 J2EE Misconfiguration: Insufficient Session-ID Length
- CWE-7 J2EE Misconfiguration: Missing Custom Error Page
- CWE-8 J2EE Misconfiguration: Entity Bean Declared Remote
- CWE-9 J2EE Misconfiguration: Weak Access Permissions for EJB Methods
- CWE-459 Incomplete Cleanup
- CWE-489 Active Debug Code
- CWE-11 ASP.NET Misconfiguration: Creating Debug Binary
- CWE-12 ASP.NET Misconfiguration: Missing Custom Error Page
- CWE-13 ASP.NET Misconfiguration: Password in Configuration File
- CWE-520 .NET Misconfiguration: Use of Impersonation
- CWE-554 ASP.NET Misconfiguration: Not Using Input Validation Framework
- CWE-556 ASP.NET Misconfiguration: Use of Identity Impersonation
- CWE-526 Cleartext Storage of Sensitive Information in an Environment Variable
- CWE-527 Exposure of Version-Control Repository to an Unauthorized Control Sphere
- CWE-528 Exposure of Core Dump File to an Unauthorized Control Sphere
- CWE-529 Exposure of Access Control List Files to an Unauthorized Control Sphere
- CWE-530 Exposure of Backup File to an Unauthorized Control Sphere
- CWE-531 Inclusion of Sensitive Information in Test Code
- CWE-532 Insertion of Sensitive Information into Log File
- CWE-540 Inclusion of Sensitive Information in Source Code
- CWE-541 Inclusion of Sensitive Information in an Include File
- CWE-548 Exposure of Information Through Directory Listing
- CWE-552 Files or Directories Accessible to External Parties
Źródła
Wpis z katalogu CWE 4.20.