2398
Nature Type ID Name Page
MemberOf 902 SFP Primary Cluster: Channel 888 2387
HasMember 290 Authentication Bypass by Spoofing 888 705
HasMember 294 Authentication Bypass by Capture-replay 888 712
HasMember 300 Channel Accessible by Non-Endpoint 888 730
HasMember 301 Reflection Attack in an Authentication Protocol 888 733
HasMember 419 Unprotected Primary Channel 888 1017
HasMember 420 Unprotected Alternate Channel 888 1018
HasMember 421 Race Condition During Access to Alternate Channel 888 1020
HasMember 441 Unintended Proxy or Intermediary ('Confused Deputy') 888 1064
Category-957: SFP Secondary Cluster: Protocol Error
Category ID : 957
Summary
This category identifies Software Fault Patterns (SFPs) within the Protocol Error cluster.
Membership
Nature Type ID Name Page
MemberOf 902 SFP Primary Cluster: Channel 888 2387
HasMember 353 Missing Support for Integrity Check 888 874
HasMember 435 Improper Interaction Between Multiple Correctly-
Behaving Entities
888 1055
HasMember 436 Interpretation Conflict 888 1057
HasMember 437 Incomplete Model of Endpoint Features 888 1059
HasMember 757 Selection of Less-Secure Algorithm During Negotiation
('Algorithm Downgrade')
888 1581
Category-958: SFP Secondary Cluster: Broken Cryptography
Category ID : 958
Summary
This category identifies Software Fault Patterns (SFPs) within the Broken Cryptography cluster.
Membership
Nature Type ID Name Page
MemberOf 903 SFP Primary Cluster: Cryptography 888 2387
HasMember 325 Missing Cryptographic Step 888 794
HasMember 327 Use of a Broken or Risky Cryptographic Algorithm 888 799
HasMember 328 Use of Weak Hash 888 806
HasMember 759 Use of a One-Way Hash without a Salt 888 1585
HasMember 760 Use of a One-Way Hash with a Predictable Salt 888 1589
Category-959: SFP Secondary Cluster: Weak Cryptography
Category ID : 959
CWE Version 4.14
CWE-960: SFP Secondary Cluster: Ambiguous Exception Type
CWE-960: SFP Secondary Cluster: Ambiguous Exception Type