CWE-963 카테고리 상세 정보

CWE-963

SFP Secondary Cluster: Exposed Data
2014-07-31 +00:00
Incomplete
2023-06-29 +00:00
CWE Mitre.org
특정 CWE 알림
특정 CWE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

이름: SFP Secondary Cluster: Exposed Data

This category identifies Software Fault Patterns (SFPs) within the Exposed Data cluster (SFP23).

CWE 구성원 목록

CWE-11: ASP.NET Misconfiguration: Creating Debug Binary 기본

CWE-117: Improper Output Neutralization for Logs 기본

CWE-12: ASP.NET Misconfiguration: Missing Custom Error Page 기본

CWE-13: ASP.NET Misconfiguration: Password in Configuration File 기본

CWE-14: Compiler Removal of Code to Clear Buffers 기본

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor 기본

CWE-201: Insertion of Sensitive Information Into Sent Data 기본

CWE-209: Generation of Error Message Containing Sensitive Information 기본

CWE-210: Self-generated Error Message Containing Sensitive Information 기본

CWE-211: Externally-Generated Error Message Containing Sensitive Information 기본

CWE-212: Improper Removal of Sensitive Information Before Storage or Transfer 기본

CWE-213: Exposure of Sensitive Information Due to Incompatible Policies 기본

CWE-214: Invocation of Process Using Visible Sensitive Information 기본

CWE-215: Insertion of Sensitive Information Into Debugging Code 기본

CWE-219: Storage of File with Sensitive Data Under Web Root 기본

CWE-220: Storage of File With Sensitive Data Under FTP Root 기본

CWE-226: Sensitive Information in Resource Not Removed Before Reuse 기본

CWE-244: Improper Clearing of Heap Memory Before Release 기본

CWE-256: Plaintext Storage of a Password 기본

CWE-257: Storing Passwords in a Recoverable Format 기본

CWE-260: Password in Configuration File 기본

CWE-311: Missing Encryption of Sensitive Data 기본

CWE-312: Cleartext Storage of Sensitive Information 기본

CWE-313: Cleartext Storage in a File or on Disk 기본

CWE-314: Cleartext Storage in the Registry 기본

CWE-315: Cleartext Storage of Sensitive Information in a Cookie 기본

CWE-316: Cleartext Storage of Sensitive Information in Memory 기본

CWE-317: Cleartext Storage of Sensitive Information in GUI 기본

CWE-318: Cleartext Storage of Sensitive Information in Executable 기본

CWE-319: Cleartext Transmission of Sensitive Information 기본

CWE-374: Passing Mutable Objects to an Untrusted Method 기본

CWE-375: Returning a Mutable Object to an Untrusted Caller 기본

CWE-402: Transmission of Private Resources into a New Sphere 기본

CWE-403: Exposure of File Descriptor to Unintended Control Sphere 기본

CWE-433: Unparsed Raw Web Content Delivery 기본

CWE-495: Private Data Structure Returned From A Public Method 기본

CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere 기본

CWE-498: Cloneable Class Containing Sensitive Information 기본

CWE-499: Serializable Class Containing Sensitive Data 기본

CWE-5: J2EE Misconfiguration: Data Transmission Without Encryption 기본

CWE-501: Trust Boundary Violation 기본

CWE-522: Insufficiently Protected Credentials 기본

CWE-523: Unprotected Transport of Credentials 기본

CWE-526: Cleartext Storage of Sensitive Information in an Environment Variable 기본

CWE-527: Exposure of Version-Control Repository to an Unauthorized Control Sphere 기본

CWE-528: Exposure of Core Dump File to an Unauthorized Control Sphere 기본

CWE-529: Exposure of Access Control List Files to an Unauthorized Control Sphere 기본

CWE-530: Exposure of Backup File to an Unauthorized Control Sphere 기본

CWE-532: Insertion of Sensitive Information into Log File 기본

CWE-535: Exposure of Information Through Shell Error Message 기본

CWE-536: Servlet Runtime Error Message Containing Sensitive Information 기본

CWE-537: Java Runtime Error Message Containing Sensitive Information 기본

CWE-538: Insertion of Sensitive Information into Externally-Accessible File or Directory 기본

CWE-539: Use of Persistent Cookies Containing Sensitive Information 기본

CWE-540: Inclusion of Sensitive Information in Source Code 기본

CWE-541: Inclusion of Sensitive Information in an Include File 기본

CWE-546: Suspicious Comment 기본

CWE-548: Exposure of Information Through Directory Listing 기본

CWE-550: Server-generated Error Message Containing Sensitive Information 기본

CWE-552: Files or Directories Accessible to External Parties 기본

CWE-555: J2EE Misconfiguration: Plaintext Password in Configuration File 기본

CWE-591: Sensitive Data Storage in Improperly Locked Memory 기본

CWE-598: Use of HTTP Request With Sensitive Query String 기본

CWE-607: Public Static Final Field References Mutable Object 기본

CWE-612: Improper Authorization of Index Containing Sensitive Information 기본

CWE-615: Inclusion of Sensitive Information in Source Code Comments 기본

CWE-642: External Control of Critical State Data 기본

CWE-668: Exposure of Resource to Wrong Sphere 기본

CWE-669: Incorrect Resource Transfer Between Spheres 기본

CWE-7: J2EE Misconfiguration: Missing Custom Error Page 기본

CWE-756: Missing Custom Error Page 기본

CWE-767: Access to Critical Private Variable via Public Method 기본

CWE-8: J2EE Misconfiguration: Entity Bean Declared Remote 기본

CWE 정보

취약점 매핑 메모

근거 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
댓글 : See member weaknesses of this category.

제출

이름 조직 날짜 출시일 Version
CWE Content Team MITRE 2014-07-29 +00:00 2014-07-31 +00:00 2.8

수정 사항

이름 조직 날짜 댓글
CWE Content Team MITRE 2018-03-27 +00:00 updated Relationships
CWE Content Team MITRE 2020-02-24 +00:00 updated Description
CWE Content Team MITRE 2023-04-27 +00:00 updated Mapping_Notes
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes
CVE Find에 제시된 정보는 엄선된 여러 참고 소스에서 가져옵니다. CVE 데이터는 MITRE Corporation과 국가 취약점 데이터베이스(NVD)에서 제공됩니다. KEV 카탈로그는 CISA에서 가져오며, EPSS 점수는 FIRST.org에서 제공됩니다. CWE 및 CAPEC 데이터는 MITRE Corporation에서 관리하며, CPE 정보는 NVD에서 제공됩니다.