CWE-930 · Kategoria
OWASP Top Ten 2013 Category A2 - Broken Authentication and Session Management
- Status
- Przestarzały
- Dodano
- 17 lipca 2013
- Ostatnia zmiana
- 9 września 2025
Opis
Weaknesses in this category are related to the A2 category in the OWASP Top Ten 2013.
Wpisy w tej grupie
- CWE-256 Plaintext Storage of a Password
- CWE-287 Improper Authentication
- CWE-311 Missing Encryption of Sensitive Data
- CWE-384 Session Fixation
- CWE-522 Insufficiently Protected Credentials
- CWE-523 Unprotected Transport of Credentials
- CWE-613 Insufficient Session Expiration
- CWE-620 Unverified Password Change
- CWE-640 Weak Password Recovery Mechanism for Forgotten Password
Źródła
Wpis z katalogu CWE 4.20.