名稱: Weaknesses in OWASP Top Ten (2010)
CWE nodes in this view (graph) are associated with the OWASP Top Ten, as released in 2010. This view is considered obsolete as a newer version of the OWASP Top Ten is available.
CWE 成員
CWE-810: OWASP Top Ten 2010 Category A1 - Injection 類別
CWE-811: OWASP Top Ten 2010 Category A2 - Cross-Site Scripting (XSS) 類別
CWE-812: OWASP Top Ten 2010 Category A3 - Broken Authentication and Session Management 類別
CWE-813: OWASP Top Ten 2010 Category A4 - Insecure Direct Object References 類別
CWE-814: OWASP Top Ten 2010 Category A5 - Cross-Site Request Forgery(CSRF) 類別
CWE-815: OWASP Top Ten 2010 Category A6 - Security Misconfiguration 類別
CWE-816: OWASP Top Ten 2010 Category A7 - Insecure Cryptographic Storage 類別
CWE-817: OWASP Top Ten 2010 Category A8 - Failure to Restrict URL Access 類別
CWE-818: OWASP Top Ten 2010 Category A9 - Insufficient Transport Layer Protection 類別
CWE-819: OWASP Top Ten 2010 Category A10 - Unvalidated Redirects and Forwards 類別
CWE 檢視資訊
漏洞對應備注
理由說明 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.備註 : Use this View or other Views to search and navigate for the appropriate weakness.
備注
The relationships in this view are a direct extraction of the CWE mappings that are in the 2010 OWASP document. CWE has changed since the release of that document.受眾
| 相關方 | 描述 |
|---|---|
| Software Developers | This view outlines the most important issues as identified by the OWASP Top Ten (2010 version), providing a good starting point for web application developers who want to code more securely. |
| Product Customers | This view outlines the most important issues as identified by the OWASP Top Ten (2010 version), providing customers with a way of asking their software developers to follow minimum expectations for secure code. |
| Educators | Since the OWASP Top Ten covers the most frequently encountered issues, this view can be used by educators as training material for students. |
提交
| 名稱 | 機構 | 日期 | 發布日期 | Version |
|---|---|---|---|---|
| CWE Content Team | MITRE | 1.9 |
修改記錄
| 名稱 | 機構 | 日期 | 備註 |
|---|---|---|---|
| CWE Content Team | MITRE | Updated Reference URL | |
| CWE Content Team | MITRE | updated References | |
| CWE Content Team | MITRE | updated References | |
| CWE Content Team | MITRE | updated Description | |
| CWE Content Team | MITRE | updated View_Audience | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated References |
參考資料
REF-759
Top 10 2010https://github.com/OWASP/Top10/blob/master/2010/OWASP%20Top%2010%20-%202010%20English.pdf
