2488
Nature Type ID Name Page
HasMember 359 Exposure of Private Personal Information to an
Unauthorized Actor
1344 882
HasMember 377 Insecure Temporary File 1344 925
HasMember 402 Transmission of Private Resources into a New Sphere
('Resource Leak')
1344 976
HasMember 425 Direct Request ('Forced Browsing') 1344 1025
HasMember 441 Unintended Proxy or Intermediary ('Confused Deputy') 1344 1064
HasMember 497 Exposure of Sensitive System Information to an
Unauthorized Control Sphere
1344 1193
HasMember 538 Insertion of Sensitive Information into Externally-
Accessible File or Directory
1344 1248
HasMember 540 Inclusion of Sensitive Information in Source Code 1344 1251
HasMember 548 Exposure of Information Through Directory Listing 1344 1261
HasMember 552 Files or Directories Accessible to External Parties 1344 1265
HasMember 566 Authorization Bypass Through User-Controlled SQL
Primary Key
1344 1286
HasMember 601 URL Redirection to Untrusted Site ('Open Redirect') 1344 1345
HasMember 639 Authorization Bypass Through User-Controlled Key 1344 1406
HasMember 651 Exposure of WSDL File Containing Sensitive
Information
1344 1433
HasMember 668 Exposure of Resource to Wrong Sphere 1344 1469
HasMember 706 Use of Incorrectly-Resolved Name or Reference 1344 1544
HasMember 862 Missing Authorization 1344 1780
HasMember 863 Incorrect Authorization 1344 1787
HasMember 913 Improper Control of Dynamically-Managed Code
Resources
1344 1805
HasMember 922 Insecure Storage of Sensitive Information 1344 1825
HasMember 1275 Sensitive Cookie with Improper SameSite Attribute 1344 2110
Notes
Maintenance
As of CWE 4.6, the relationships in this category were pulled directly from the CWE mappings
cited in the 2021 OWASP Top Ten. These mappings include categories, which are discouraged
for mapping, as well as high-level weaknesses such as Pillars. The CWE Program will work with
OWASP to improve these mappings, possibly requiring modifications to CWE itself.
References
[REF-1207]"A01:2021 - Broken Access Control". 2021 September 4. OWASP. < https://owasp.org/
Top10/A01_2021-Broken_Access_Control/ >.
[REF-1206]"OWASP Top 10:2021". 2021 September 4. OWASP. < https://owasp.org/Top10/ >.
Category-1346: OWASP Top Ten 2021 Category A02:2021 - Cryptographic
Failures
Category ID : 1346
Summary
Weaknesses in this category are related to the A02 category "Cryptographic Failures" in the
OWASP Top Ten 2021.
CWE Version 4.14
CWE-1346: OWASP Top Ten 2021 Category A02:2021 - Cryptographic Failures
CWE-1346: OWASP Top Ten 2021 Category A02:2021 - Cryptographic Failures