名称: Weaknesses in OWASP Top Ten (2007)

CWE nodes in this view (graph) are associated with the OWASP Top Ten, as released in 2007. This view is considered obsolete as a newer version of the OWASP Top Ten is available.

CWE 成员

CWE-717: OWASP Top Ten 2007 Category A6 - Information Leakage and Improper Error Handling 类别

CWE-717: Weaknesses in this category are related to the A6 category in the OWASP Top Ten 2007.

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor 基础

CWE-203: Observable Discrepancy 基础

CWE-209: Generation of Error Message Containing Sensitive Information 基础

CWE-215: Insertion of Sensitive Information Into Debugging Code 基础

CWE-718: OWASP Top Ten 2007 Category A7 - Broken Authentication and Session Management 类别

CWE-718: Weaknesses in this category are related to the A7 category in the OWASP Top Ten 2007.

CWE-287: Improper Authentication 基础

CWE-301: Reflection Attack in an Authentication Protocol 基础

CWE-522: Insufficiently Protected Credentials 基础

CWE-719: OWASP Top Ten 2007 Category A8 - Insecure Cryptographic Storage 类别

CWE-719: Weaknesses in this category are related to the A8 category in the OWASP Top Ten 2007.

CWE-311: Missing Encryption of Sensitive Data 基础

CWE-321: Use of Hard-coded Cryptographic Key 基础

CWE-325: Missing Cryptographic Step 基础

CWE-326: Inadequate Encryption Strength 基础

CWE-720: OWASP Top Ten 2007 Category A9 - Insecure Communications 类别

CWE-720: Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2007.

CWE-311: Missing Encryption of Sensitive Data 基础

CWE-321: Use of Hard-coded Cryptographic Key 基础

CWE-325: Missing Cryptographic Step 基础

CWE-326: Inadequate Encryption Strength 基础

CWE-721: OWASP Top Ten 2007 Category A10 - Failure to Restrict URL Access 类别

CWE-721: Weaknesses in this category are related to the A10 category in the OWASP Top Ten 2007.

CWE-285: Improper Authorization 基础

CWE-288: Authentication Bypass Using an Alternate Path or Channel 基础

CWE-425: Direct Request 基础

CWE 视图信息

漏洞映射说明

依据 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
备注 : Use this View or other Views to search and navigate for the appropriate weakness.

备注

The relationships in this view are a direct extraction of the CWE mappings that are in the 2007 OWASP document. CWE has changed since the release of that document.

目标受众

利益相关方	描述
Software Developers	This view outlines the most important issues as identified by the OWASP Top Ten (2007 version), providing a good starting point for web application developers who want to code more securely.
Product Customers	This view outlines the most important issues as identified by the OWASP Top Ten (2007 version), providing customers with a way of asking their software developers to follow minimum expectations for secure code.
Educators	Since the OWASP Top Ten covers the most frequently encountered issues, this view can be used by educators as training material for students.

提交记录

名称	组织	日期	发布日期	Version
CWE Content Team	MITRE	2007-10-01 +00:00	2007-10-01 +00:00	Draft 7

修改记录

名称	组织	日期	备注
CWE Content Team	MITRE	2008-09-08 +00:00	updated Description, Name, Relationships, References, Relationship_Notes, View_Audience, View_Structure
CWE Content Team	MITRE	2017-01-19 +00:00	updated Relationships
CWE Content Team	MITRE	2017-11-08 +00:00	updated References
CWE Content Team	MITRE	2019-01-03 +00:00	updated Description
CWE Content Team	MITRE	2020-02-24 +00:00	updated View_Audience
CWE Content Team	MITRE	2023-04-27 +00:00	updated References
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes

参考资料

REF-43

OWASP TOP 10
OWASP.
https://github.com/owasp-top/owasp-top-2007

CWE-629 视图详情

CWE-629