CWE-949 · Kategoria
SFP Secondary Cluster: Faulty Endpoint Authentication
- Status
- Niekompletny
- Dodano
- 29 lipca 2014
- Ostatnia zmiana
- 29 czerwca 2023
Opis
This category identifies Software Fault Patterns (SFPs) within the Faulty Endpoint Authentication cluster (SFP29).
Wpisy w tej grupie
- CWE-293 Using Referer Field for Authentication
- CWE-302 Authentication Bypass by Assumed-Immutable Data
- CWE-345 Insufficient Verification of Data Authenticity
- CWE-346 Origin Validation Error
- CWE-350 Reliance on Reverse DNS Resolution for a Security-Critical Action
- CWE-360 Trust of System Event Data
- CWE-551 Incorrect Behavior Order: Authorization Before Parsing and Canonicalization
- CWE-565 Reliance on Cookies without Validation and Integrity Checking
- CWE-647 Use of Non-Canonical URL Paths for Authorization Decisions
Wpis z katalogu CWE 4.20.