근거 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
댓글 : See member weaknesses of this category.

제출

이름	조직	날짜	출시일	Version
CWE Content Team	MITRE	2025-12-01 +00:00	2025-12-11 +00:00	4.19

참고 자료

REF-1500

OWASP Top 10:2025 RC1
https://owasp.org/Top10/2025/0x00_2025-Introduction/

REF-1501

A01:2025 - Broken Access Control
OWASP.
https://owasp.org/Top10/2025/A01_2025-Broken_Access_Control/

CWE-1436 카테고리 상세 정보

CWE-1436

이름: OWASP Top Ten 2025 Category A01:2025 - Broken Access Control

CWE 구성원 목록

CWE-1275: Sensitive Cookie with Improper SameSite Attribute 기본

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor 기본

CWE-201: Insertion of Sensitive Information Into Sent Data 기본

CWE-219: Storage of File with Sensitive Data Under Web Root 기본

CWE-22: Improper Limitation of a Pathname to a Restricted Directory 기본

CWE-23: Relative Path Traversal 기본

CWE-276: Incorrect Default Permissions 기본

CWE-281: Improper Preservation of Permissions 기본

CWE-282: Improper Ownership Management 기본

CWE-283: Unverified Ownership 기본

CWE-284: Improper Access Control 기본

CWE-285: Improper Authorization 기본

CWE-352: Cross-Site Request Forgery 기본

CWE-359: Exposure of Private Personal Information to an Unauthorized Actor 기본

CWE-36: Absolute Path Traversal 기본

CWE-377: DEPRECATED: Insecure Temporary File 기본

CWE-379: Creation of Temporary File in Directory with Insecure Permissions 기본

CWE-402: Transmission of Private Resources into a New Sphere 기본

CWE-424: Improper Protection of Alternate Path 기본

CWE-425: Direct Request 기본

CWE-441: Unintended Proxy or Intermediary 기본

CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere 기본

CWE-538: Insertion of Sensitive Information into Externally-Accessible File or Directory 기본

CWE-540: Inclusion of Sensitive Information in Source Code 기본

CWE-548: Exposure of Information Through Directory Listing 기본

CWE-552: Files or Directories Accessible to External Parties 기본

CWE-566: Authorization Bypass Through User-Controlled SQL Primary Key 기본

CWE-59: Improper Link Resolution Before File Access 기본

CWE-601: URL Redirection to Untrusted Site 기본

CWE-61: UNIX Symbolic Link (Symlink) Following 기본

CWE-615: Inclusion of Sensitive Information in Source Code Comments 기본

CWE-639: Authorization Bypass Through User-Controlled Key 기본

CWE-65: Windows Hard Link 기본

CWE-668: Exposure of Resource to Wrong Sphere 기본

CWE-732: Incorrect Permission Assignment for Critical Resource 기본

CWE-749: Exposed Dangerous Method or Function 기본

CWE-862: Missing Authorization 기본

CWE-863: Incorrect Authorization 기본

CWE-918: Server-Side Request Forgery 기본

CWE-922: Insecure Storage of Sensitive Information 기본

CWE 정보

취약점 매핑 메모

제출

참고 자료

REF-1500

REF-1501