CWE-1437 소프트웨어 약점 상세 정보 | CVE Find

이름: OWASP Top Ten 2025 Category A02:2025 - Security Misconfiguration

Weaknesses in this category are related to the A02 category "Security Misconfiguration" in the OWASP Top Ten 2025.

CWE 구성원 목록

CWE-1004: Sensitive Cookie Without 'HttpOnly' Flag 기본

CWE-11: ASP.NET Misconfiguration: Creating Debug Binary 기본

CWE-1174: ASP.NET Misconfiguration: Improper Model Validation 기본

CWE-13: ASP.NET Misconfiguration: Password in Configuration File 기본

CWE-15: External Control of System or Configuration Setting 기본

CWE-16: Configuration 카테고리

CWE-16: Weaknesses in this category are typically introduced during the configuration of the software.

CWE-260: Password in Configuration File 기본

CWE-315: Cleartext Storage of Sensitive Information in a Cookie 기본

CWE-489: Active Debug Code 기본

CWE-5: J2EE Misconfiguration: Data Transmission Without Encryption 기본

CWE-526: Cleartext Storage of Sensitive Information in an Environment Variable 기본

CWE-547: Use of Hard-coded, Security-relevant Constants 기본

CWE-611: Improper Restriction of XML External Entity Reference 기본

CWE-614: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute 기본

CWE-776: Improper Restriction of Recursive Entity References in DTDs 기본

CWE-942: Permissive Cross-domain Security Policy with Untrusted Domains 기본

CWE 정보

취약점 매핑 메모

근거 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
댓글 : See member weaknesses of this category.

제출

이름	조직	날짜	출시일	Version
CWE Content Team	MITRE	2025-12-01 +00:00	2025-12-11 +00:00	4.19

참고 자료

REF-1500

OWASP Top 10:2025 RC1
https://owasp.org/Top10/2025/0x00_2025-Introduction/

REF-1502

A02:2025 Security Misconfiguration
OWASP.
https://owasp.org/Top10/2025/A02_2025-Security_Misconfiguration/