CWE-963 · Kategoria
SFP Secondary Cluster: Exposed Data
- Status
- Niekompletny
- Dodano
- 29 lipca 2014
- Ostatnia zmiana
- 29 czerwca 2023
Opis
This category identifies Software Fault Patterns (SFPs) within the Exposed Data cluster (SFP23).
Wpisy w tej grupie
- CWE-11 ASP.NET Misconfiguration: Creating Debug Binary
- CWE-117 Improper Output Neutralization for Logs
- CWE-12 ASP.NET Misconfiguration: Missing Custom Error Page
- CWE-13 ASP.NET Misconfiguration: Password in Configuration File
- CWE-14 Compiler Removal of Code to Clear Buffers
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
- CWE-201 Insertion of Sensitive Information Into Sent Data
- CWE-209 Generation of Error Message Containing Sensitive Information
- CWE-210 Self-generated Error Message Containing Sensitive Information
- CWE-211 Externally-Generated Error Message Containing Sensitive Information
- CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer
- CWE-213 Exposure of Sensitive Information Due to Incompatible Policies
- CWE-214 Invocation of Process Using Visible Sensitive Information
- CWE-215 Insertion of Sensitive Information Into Debugging Code
- CWE-219 Storage of File with Sensitive Data Under Web Root
- CWE-220 Storage of File With Sensitive Data Under FTP Root
- CWE-226 Sensitive Information in Resource Not Removed Before Reuse
- CWE-244 Improper Clearing of Heap Memory Before Release ('Heap Inspection')
- CWE-256 Plaintext Storage of a Password
- CWE-257 Storing Passwords in a Recoverable Format
- CWE-260 Password in Configuration File
- CWE-311 Missing Encryption of Sensitive Data
- CWE-312 Cleartext Storage of Sensitive Information
- CWE-313 Cleartext Storage in a File or on Disk
- CWE-314 Cleartext Storage in the Registry
- CWE-315 Cleartext Storage of Sensitive Information in a Cookie
- CWE-316 Cleartext Storage of Sensitive Information in Memory
- CWE-317 Cleartext Storage of Sensitive Information in GUI
- CWE-318 Cleartext Storage of Sensitive Information in Executable
- CWE-319 Cleartext Transmission of Sensitive Information
- CWE-374 Passing Mutable Objects to an Untrusted Method
- CWE-375 Returning a Mutable Object to an Untrusted Caller
- CWE-402 Transmission of Private Resources into a New Sphere ('Resource Leak')
- CWE-403 Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')
- CWE-433 Unparsed Raw Web Content Delivery
- CWE-495 Private Data Structure Returned From A Public Method
- CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere
- CWE-498 Cloneable Class Containing Sensitive Information
- CWE-499 Serializable Class Containing Sensitive Data
- CWE-5 J2EE Misconfiguration: Data Transmission Without Encryption
- CWE-501 Trust Boundary Violation
- CWE-522 Insufficiently Protected Credentials
- CWE-523 Unprotected Transport of Credentials
- CWE-526 Cleartext Storage of Sensitive Information in an Environment Variable
- CWE-527 Exposure of Version-Control Repository to an Unauthorized Control Sphere
- CWE-528 Exposure of Core Dump File to an Unauthorized Control Sphere
- CWE-529 Exposure of Access Control List Files to an Unauthorized Control Sphere
- CWE-530 Exposure of Backup File to an Unauthorized Control Sphere
- CWE-532 Insertion of Sensitive Information into Log File
- CWE-535 Exposure of Information Through Shell Error Message
- CWE-536 Servlet Runtime Error Message Containing Sensitive Information
- CWE-537 Java Runtime Error Message Containing Sensitive Information
- CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory
- CWE-539 Use of Persistent Cookies Containing Sensitive Information
- CWE-540 Inclusion of Sensitive Information in Source Code
- CWE-541 Inclusion of Sensitive Information in an Include File
- CWE-546 Suspicious Comment
- CWE-548 Exposure of Information Through Directory Listing
- CWE-550 Server-generated Error Message Containing Sensitive Information
- CWE-552 Files or Directories Accessible to External Parties
- CWE-555 J2EE Misconfiguration: Plaintext Password in Configuration File
- CWE-591 Sensitive Data Storage in Improperly Locked Memory
- CWE-598 Use of HTTP Request With Sensitive Query String
- CWE-607 Public Static Final Field References Mutable Object
- CWE-612 Improper Authorization of Index Containing Sensitive Information
- CWE-615 Inclusion of Sensitive Information in Source Code Comments
- CWE-642 External Control of Critical State Data
- CWE-668 Exposure of Resource to Wrong Sphere
- CWE-669 Incorrect Resource Transfer Between Spheres
- CWE-7 J2EE Misconfiguration: Missing Custom Error Page
- CWE-756 Missing Custom Error Page
- CWE-767 Access to Critical Private Variable via Public Method
- CWE-8 J2EE Misconfiguration: Entity Bean Declared Remote
Wpis z katalogu CWE 4.20.