Detail Kategori CWE-1436

CWE-1436

OWASP Top Ten 2025 Category A01:2025 - Broken Access Control
2025-12-11 +00:00
Incomplete
CWE Mitre.org
Notifikasi untuk CWE tertentu
Tetap terinformasi tentang perubahan untuk CWE tertentu.
Kelola notifikasi

Nama: OWASP Top Ten 2025 Category A01:2025 - Broken Access Control

Weaknesses in this category are related to the A01 category "Broken Access Control" in the OWASP Top Ten 2025.

Daftar Anggota CWE

CWE-1275: Sensitive Cookie with Improper SameSite Attribute Dasar

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor Dasar

CWE-201: Insertion of Sensitive Information Into Sent Data Dasar

CWE-219: Storage of File with Sensitive Data Under Web Root Dasar

CWE-22: Improper Limitation of a Pathname to a Restricted Directory Dasar

CWE-23: Relative Path Traversal Dasar

CWE-276: Incorrect Default Permissions Dasar

CWE-281: Improper Preservation of Permissions Dasar

CWE-282: Improper Ownership Management Dasar

CWE-283: Unverified Ownership Dasar

CWE-284: Improper Access Control Dasar

CWE-285: Improper Authorization Dasar

CWE-352: Cross-Site Request Forgery Dasar

CWE-359: Exposure of Private Personal Information to an Unauthorized Actor Dasar

CWE-36: Absolute Path Traversal Dasar

CWE-377: DEPRECATED: Insecure Temporary File Dasar

CWE-379: Creation of Temporary File in Directory with Insecure Permissions Dasar

CWE-402: Transmission of Private Resources into a New Sphere Dasar

CWE-424: Improper Protection of Alternate Path Dasar

CWE-425: Direct Request Dasar

CWE-441: Unintended Proxy or Intermediary Dasar

CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere Dasar

CWE-538: Insertion of Sensitive Information into Externally-Accessible File or Directory Dasar

CWE-540: Inclusion of Sensitive Information in Source Code Dasar

CWE-548: Exposure of Information Through Directory Listing Dasar

CWE-552: Files or Directories Accessible to External Parties Dasar

CWE-566: Authorization Bypass Through User-Controlled SQL Primary Key Dasar

CWE-59: Improper Link Resolution Before File Access Dasar

CWE-601: URL Redirection to Untrusted Site Dasar

CWE-61: UNIX Symbolic Link (Symlink) Following Dasar

CWE-615: Inclusion of Sensitive Information in Source Code Comments Dasar

CWE-639: Authorization Bypass Through User-Controlled Key Dasar

CWE-65: Windows Hard Link Dasar

CWE-668: Exposure of Resource to Wrong Sphere Dasar

CWE-732: Incorrect Permission Assignment for Critical Resource Dasar

CWE-749: Exposed Dangerous Method or Function Dasar

CWE-862: Missing Authorization Dasar

CWE-863: Incorrect Authorization Dasar

CWE-918: Server-Side Request Forgery Dasar

CWE-922: Insecure Storage of Sensitive Information Dasar

Informasi CWE

Catatan Pemetaan Kerentanan

Justifikasi : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
Komentar : See member weaknesses of this category.

Pengajuan

Nama Organisasi Tanggal Tanggal rilis Version
CWE Content Team MITRE 2025-12-01 +00:00 2025-12-11 +00:00 4.19

Referensi

REF-1500

OWASP Top 10:2025 RC1
https://owasp.org/Top10/2025/0x00_2025-Introduction/

REF-1501

A01:2025 - Broken Access Control
OWASP.
https://owasp.org/Top10/2025/A01_2025-Broken_Access_Control/

Informasi yang disajikan di CVE Find berasal dari beberapa sumber referensi yang dipilih dengan cermat. Data CVE disediakan oleh MITRE Corporation dan National Vulnerability Database (NVD). Katalog Known Exploited Vulnerabilities (KEV) bersumber dari Cybersecurity and Infrastructure Security Agency (CISA), sementara skor EPSS berasal dari FIRST.org. Selain itu, data mengenai kelemahan perangkat lunak (CWE) dan pola serangan umum (CAPEC) dikelola oleh MITRE Corporation, dan informasi tentang konfigurasi perangkat keras dan perangkat lunak (CPE) disediakan oleh NVD.