CWE-255 카테고리 상세 정보

CWE-255

Credentials Management Errors
2006-07-19 +00:00
Draft
2023-06-29 +00:00
CWE Mitre.org
특정 CWE 알림
특정 CWE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

이름: Credentials Management Errors

Weaknesses in this category are related to the management of credentials.

CWE 구성원 목록

CWE-256: Plaintext Storage of a Password 기본

CWE-257: Storing Passwords in a Recoverable Format 기본

CWE-260: Password in Configuration File 기본

CWE-261: Weak Encoding for Password 기본

CWE-262: Not Using Password Aging 기본

CWE-263: Password Aging with Long Expiration 기본

CWE-324: Use of a Key Past its Expiration Date 기본

CWE-521: Weak Password Requirements 기본

CWE-523: Unprotected Transport of Credentials 기본

CWE-549: Missing Password Field Masking 기본

CWE-620: Unverified Password Change 기본

CWE-640: Weak Password Recovery Mechanism for Forgotten Password 기본

CWE-798: Use of Hard-coded Credentials 기본

CWE-916: Use of Password Hash With Insufficient Computational Effort 기본

CWE-1392: Use of Default Credentials 기본

CWE 정보

취약점 매핑 메모

근거 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves [REF-1287]. This CWE ID may have become widely-used because of NIST's usage in NVD from 2008 to 2016 (see CWE-635 view, updated to the CWE-1003 view in 2016).
댓글 : Some weakness-oriented alternatives might be found under Improper Authentication (CWE-287) or keyword searches for credentials.

제출

이름 조직 날짜 출시일 Version
CWE Community 2006-07-19 +00:00 2006-07-19 +00:00 Draft 3

수정 사항

이름 조직 날짜 댓글
CWE Content Team MITRE 2008-09-08 +00:00 updated Relationships, Taxonomy_Mappings
CWE Content Team MITRE 2010-02-16 +00:00 updated Relationships
CWE Content Team MITRE 2014-07-30 +00:00 updated Detection_Factors
CWE Content Team MITRE 2015-12-07 +00:00 updated Relationships
CWE Content Team MITRE 2017-11-08 +00:00 updated Applicable_Platforms, Detection_Factors
CWE Content Team MITRE 2019-06-20 +00:00 updated Relationships
CWE Content Team MITRE 2020-02-24 +00:00 updated Name, Relationships
CWE Content Team MITRE 2021-10-28 +00:00 updated Relationships
CWE Content Team MITRE 2022-10-13 +00:00 updated References
CWE Content Team MITRE 2023-04-27 +00:00 updated Relationships
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes

참고 자료

REF-1287

Supplemental Details - 2022 CWE Top 25
MITRE.
https://cwe.mitre.org/top25/archive/2022/2022_cwe_top25_supplemental.html#problematicMappingDetails

CVE Find에 제시된 정보는 엄선된 여러 참고 소스에서 가져옵니다. CVE 데이터는 MITRE Corporation과 국가 취약점 데이터베이스(NVD)에서 제공됩니다. KEV 카탈로그는 CISA에서 가져오며, EPSS 점수는 FIRST.org에서 제공됩니다. CWE 및 CAPEC 데이터는 MITRE Corporation에서 관리하며, CPE 정보는 NVD에서 제공됩니다.