2011 Top 25 - Porous Defenses

Opis

Weaknesses in this category are listed in the "Porous Defenses" section of the 2011 CWE/SANS Top 25 Most Dangerous Software Errors.

Wpisy w tej grupie

• CWE-250 Execution with Unnecessary Privileges
• CWE-306 Missing Authentication for Critical Function
• CWE-307 Improper Restriction of Excessive Authentication Attempts
• CWE-311 Missing Encryption of Sensitive Data
• CWE-327 Use of a Broken or Risky Cryptographic Algorithm
• CWE-732 Incorrect Permission Assignment for Critical Resource
• CWE-759 Use of a One-Way Hash without a Salt
• CWE-798 Use of Hard-coded Credentials
• CWE-807 Reliance on Untrusted Inputs in a Security Decision
• CWE-862 Missing Authorization
• CWE-863 Incorrect Authorization

Źródła