Detail Kategori CWE-1353

CWE-1353

OWASP Top Ten 2021 Category A07:2021 - Identification and Authentication Failures
2021-10-28 +00:00
Incomplete
2023-06-29 +00:00
CWE Mitre.org
Notifikasi untuk CWE tertentu
Tetap terinformasi tentang perubahan untuk CWE tertentu.
Kelola notifikasi

Nama: OWASP Top Ten 2021 Category A07:2021 - Identification and Authentication Failures

Weaknesses in this category are related to the A07 category "Identification and Authentication Failures" in the OWASP Top Ten 2021.

Daftar Anggota CWE

CWE-259: Use of Hard-coded Password Dasar

CWE-287: Improper Authentication Dasar

CWE-288: Authentication Bypass Using an Alternate Path or Channel Dasar

CWE-290: Authentication Bypass by Spoofing Dasar

CWE-294: Authentication Bypass by Capture-replay Dasar

CWE-295: Improper Certificate Validation Dasar

CWE-297: Improper Validation of Certificate with Host Mismatch Dasar

CWE-300: Channel Accessible by Non-Endpoint Dasar

CWE-302: Authentication Bypass by Assumed-Immutable Data Dasar

CWE-304: Missing Critical Step in Authentication Dasar

CWE-306: Missing Authentication for Critical Functionality Dasar

CWE-307: Improper Restriction of Excessive Authentication Attempts Dasar

CWE-346: Origin Validation Error Dasar

CWE-384: Session Fixation Dasar

CWE-521: Weak Password Requirements Dasar

CWE-613: DEPRECATED: Insufficient Session Expiration Dasar

CWE-620: Unverified Password Change Dasar

CWE-640: Weak Password Recovery Mechanism for Forgotten Password Dasar

CWE-798: Use of Hard-coded Credentials Dasar

CWE-940: Improper Verification of Source of a Communication Channel Dasar

Informasi CWE

Catatan Pemetaan Kerentanan

Justifikasi : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
Komentar : See member weaknesses of this category.

Pengajuan

Nama Organisasi Tanggal Tanggal rilis Version
CWE Content Team MITRE 2021-10-05 +00:00 2021-10-28 +00:00 4.6

Modifikasi

Nama Organisasi Tanggal Komentar
CWE Content Team MITRE 2022-10-13 +00:00 updated References
CWE Content Team MITRE 2023-04-27 +00:00 updated Mapping_Notes
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes

Referensi

REF-1213

A07:2021 - Identification and Authentication Failures
https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures/

REF-1206

OWASP Top 10:2021
https://owasp.org/Top10/

Informasi yang disajikan di CVE Find berasal dari beberapa sumber referensi yang dipilih dengan cermat. Data CVE disediakan oleh MITRE Corporation dan National Vulnerability Database (NVD). Katalog Known Exploited Vulnerabilities (KEV) bersumber dari Cybersecurity and Infrastructure Security Agency (CISA), sementara skor EPSS berasal dari FIRST.org. Selain itu, data mengenai kelemahan perangkat lunak (CWE) dan pola serangan umum (CAPEC) dikelola oleh MITRE Corporation, dan informasi tentang konfigurasi perangkat keras dan perangkat lunak (CPE) disediakan oleh NVD.