CWE-1353 카테고리 상세 정보

CWE-1353

OWASP Top Ten 2021 Category A07:2021 - Identification and Authentication Failures
2021-10-28 +00:00
Incomplete
2023-06-29 +00:00
CWE Mitre.org
특정 CWE 알림
특정 CWE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

이름: OWASP Top Ten 2021 Category A07:2021 - Identification and Authentication Failures

Weaknesses in this category are related to the A07 category "Identification and Authentication Failures" in the OWASP Top Ten 2021.

CWE 구성원 목록

CWE-259: Use of Hard-coded Password 기본

CWE-287: Improper Authentication 기본

CWE-288: Authentication Bypass Using an Alternate Path or Channel 기본

CWE-290: Authentication Bypass by Spoofing 기본

CWE-294: Authentication Bypass by Capture-replay 기본

CWE-295: Improper Certificate Validation 기본

CWE-297: Improper Validation of Certificate with Host Mismatch 기본

CWE-300: Channel Accessible by Non-Endpoint 기본

CWE-302: Authentication Bypass by Assumed-Immutable Data 기본

CWE-304: Missing Critical Step in Authentication 기본

CWE-306: Missing Authentication for Critical Functionality 기본

CWE-307: Improper Restriction of Excessive Authentication Attempts 기본

CWE-346: Origin Validation Error 기본

CWE-384: Session Fixation 기본

CWE-521: Weak Password Requirements 기본

CWE-613: DEPRECATED: Insufficient Session Expiration 기본

CWE-620: Unverified Password Change 기본

CWE-640: Weak Password Recovery Mechanism for Forgotten Password 기본

CWE-798: Use of Hard-coded Credentials 기본

CWE-940: Improper Verification of Source of a Communication Channel 기본

CWE 정보

취약점 매핑 메모

근거 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
댓글 : See member weaknesses of this category.

제출

이름 조직 날짜 출시일 Version
CWE Content Team MITRE 2021-10-05 +00:00 2021-10-28 +00:00 4.6

수정 사항

이름 조직 날짜 댓글
CWE Content Team MITRE 2022-10-13 +00:00 updated References
CWE Content Team MITRE 2023-04-27 +00:00 updated Mapping_Notes
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes

참고 자료

REF-1213

A07:2021 - Identification and Authentication Failures
https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures/

REF-1206

OWASP Top 10:2021
https://owasp.org/Top10/

CVE Find에 제시된 정보는 엄선된 여러 참고 소스에서 가져옵니다. CVE 데이터는 MITRE Corporation과 국가 취약점 데이터베이스(NVD)에서 제공됩니다. KEV 카탈로그는 CISA에서 가져오며, EPSS 점수는 FIRST.org에서 제공됩니다. CWE 및 CAPEC 데이터는 MITRE Corporation에서 관리하며, CPE 정보는 NVD에서 제공됩니다.