이름: Weaknesses in OWASP Top Ten (2007)

CWE nodes in this view (graph) are associated with the OWASP Top Ten, as released in 2007. This view is considered obsolete as a newer version of the OWASP Top Ten is available.

CWE 구성원

CWE-716: OWASP Top Ten 2007 Category A5 - Cross Site Request Forgery (CSRF) 카테고리

CWE-716: Weaknesses in this category are related to the A5 category in the OWASP Top Ten 2007.

CWE-352: Cross-Site Request Forgery 기본

CWE-717: OWASP Top Ten 2007 Category A6 - Information Leakage and Improper Error Handling 카테고리

CWE-717: Weaknesses in this category are related to the A6 category in the OWASP Top Ten 2007.

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor 기본

CWE-203: Observable Discrepancy 기본

CWE-209: Generation of Error Message Containing Sensitive Information 기본

CWE-215: Insertion of Sensitive Information Into Debugging Code 기본

CWE-718: OWASP Top Ten 2007 Category A7 - Broken Authentication and Session Management 카테고리

CWE-718: Weaknesses in this category are related to the A7 category in the OWASP Top Ten 2007.

CWE-287: Improper Authentication 기본

CWE-301: Reflection Attack in an Authentication Protocol 기본

CWE-522: Insufficiently Protected Credentials 기본

CWE-719: OWASP Top Ten 2007 Category A8 - Insecure Cryptographic Storage 카테고리

CWE-719: Weaknesses in this category are related to the A8 category in the OWASP Top Ten 2007.

CWE-311: Missing Encryption of Sensitive Data 기본

CWE-321: Use of Hard-coded Cryptographic Key 기본

CWE-325: Missing Cryptographic Step 기본

CWE-326: Inadequate Encryption Strength 기본

CWE-720: OWASP Top Ten 2007 Category A9 - Insecure Communications 카테고리

CWE-720: Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2007.

CWE-311: Missing Encryption of Sensitive Data 기본

CWE-321: Use of Hard-coded Cryptographic Key 기본

CWE-325: Missing Cryptographic Step 기본

CWE-326: Inadequate Encryption Strength 기본

CWE-721: OWASP Top Ten 2007 Category A10 - Failure to Restrict URL Access 카테고리

CWE-721: Weaknesses in this category are related to the A10 category in the OWASP Top Ten 2007.

CWE-285: Improper Authorization 기본

CWE-288: Authentication Bypass Using an Alternate Path or Channel 기본

CWE-425: Direct Request 기본

CWE 뷰 정보

취약점 매핑 메모

근거 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
댓글 : Use this View or other Views to search and navigate for the appropriate weakness.

메모

The relationships in this view are a direct extraction of the CWE mappings that are in the 2007 OWASP document. CWE has changed since the release of that document.

대상

이해관계자	설명
Software Developers	This view outlines the most important issues as identified by the OWASP Top Ten (2007 version), providing a good starting point for web application developers who want to code more securely.
Product Customers	This view outlines the most important issues as identified by the OWASP Top Ten (2007 version), providing customers with a way of asking their software developers to follow minimum expectations for secure code.
Educators	Since the OWASP Top Ten covers the most frequently encountered issues, this view can be used by educators as training material for students.

제출

이름	조직	날짜	출시일	Version
CWE Content Team	MITRE	2007-10-01 +00:00	2007-10-01 +00:00	Draft 7

수정 사항

이름	조직	날짜	댓글
CWE Content Team	MITRE	2008-09-08 +00:00	updated Description, Name, Relationships, References, Relationship_Notes, View_Audience, View_Structure
CWE Content Team	MITRE	2017-01-19 +00:00	updated Relationships
CWE Content Team	MITRE	2017-11-08 +00:00	updated References
CWE Content Team	MITRE	2019-01-03 +00:00	updated Description
CWE Content Team	MITRE	2020-02-24 +00:00	updated View_Audience
CWE Content Team	MITRE	2023-04-27 +00:00	updated References
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes

참고 자료

REF-43

OWASP TOP 10
OWASP.
https://github.com/owasp-top/owasp-top-2007

CWE-629 뷰 상세 정보

CWE-629