이름: OWASP Top Ten 2013 Category A2 - Broken Authentication and Session Management

Weaknesses in this category are related to the A2 category in the OWASP Top Ten 2013.

CWE 구성원 목록

CWE-256: Plaintext Storage of a Password 기본

CWE-287: Improper Authentication 기본

CWE-311: Missing Encryption of Sensitive Data 기본

CWE-384: Session Fixation 기본

CWE-522: Insufficiently Protected Credentials 기본

CWE-523: Unprotected Transport of Credentials 기본

CWE-613: DEPRECATED: Insufficient Session Expiration 기본

CWE-620: Unverified Password Change 기본

CWE-640: Weak Password Recovery Mechanism for Forgotten Password 기본

CWE 정보

취약점 매핑 메모

근거 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
댓글 : See member weaknesses of this category.

제출

이름	조직	날짜	출시일	Version
CWE Content Team	MITRE	2013-07-17 +00:00	2013-07-17 +00:00	2.5

수정 사항

이름	조직	날짜	댓글
CWE Content Team	MITRE	2014-06-23 +00:00	updated Relationships
CWE Content Team	MITRE	2018-01-24 +00:00	updated Relationships
CWE Content Team	MITRE	2018-03-27 +00:00	updated Relationships
CWE Content Team	MITRE	2023-04-27 +00:00	updated Mapping_Notes
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes
CWE Content Team	MITRE	2025-09-09 +00:00	updated References

참고 자료

REF-929

Top 10 2013-A2-Broken Authentication and Session Management
OWASP.
https://web.archive.org/web/20180324195305/https://www.owasp.org/index.php/Top_10_2013-A2-Broken_Authentication_and_Session_Management

CWE-930 카테고리 상세 정보

CWE-930