2009 Top 25 - Porous Defenses

Opis

Weaknesses in this category are listed in the "Porous Defenses" section of the 2009 CWE/SANS Top 25 Programming Errors.

Wpisy w tej grupie

• CWE-250 Execution with Unnecessary Privileges
• CWE-259 Use of Hard-coded Password
• CWE-285 Improper Authorization
• CWE-327 Use of a Broken or Risky Cryptographic Algorithm
• CWE-330 Use of Insufficiently Random Values
• CWE-602 Client-Side Enforcement of Server-Side Security
• CWE-732 Incorrect Permission Assignment for Critical Resource
• CWE-798 Use of Hard-coded Credentials

Źródła