2426
Nature Type ID Name Page
MemberOf 1008 Architectural Concepts 1008 2577
HasMember 15 External Control of System or Configuration Setting 1008 17
HasMember 114 Process Control 1008 277
HasMember 219 Storage of File with Sensitive Data Under Web Root 1008 553
HasMember 220 Storage of File With Sensitive Data Under FTP Root 1008 555
HasMember 266 Incorrect Privilege Assignment 1008 638
HasMember 267 Privilege Defined With Unsafe Actions 1008 641
HasMember 268 Privilege Chaining 1008 644
HasMember 269 Improper Privilege Management 1008 646
HasMember 270 Privilege Context Switching Error 1008 651
HasMember 271 Privilege Dropping / Lowering Errors 1008 653
HasMember 272 Least Privilege Violation 1008 656
HasMember 273 Improper Check for Dropped Privileges 1008 660
HasMember 274 Improper Handling of Insufficient Privileges 1008 663
HasMember 276 Incorrect Default Permissions 1008 665
HasMember 277 Insecure Inherited Permissions 1008 668
HasMember 279 Incorrect Execution-Assigned Permissions 1008 671
HasMember 280 Improper Handling of Insufficient Permissions or
Privileges
1008 672
HasMember 281 Improper Preservation of Permissions 1008 674
HasMember 282 Improper Ownership Management 1008 676
HasMember 283 Unverified Ownership 1008 678
HasMember 284 Improper Access Control 1008 680
HasMember 285 Improper Authorization 1008 684
HasMember 286 Incorrect User Management 1008 691
HasMember 300 Channel Accessible by Non-Endpoint 1008 730
HasMember 341 Predictable from Observable State 1008 843
HasMember 359 Exposure of Private Personal Information to an
Unauthorized Actor
1008 882
HasMember 403 Exposure of File Descriptor to Unintended Control
Sphere ('File Descriptor Leak')
1008 978
HasMember 419 Unprotected Primary Channel 1008 1017
HasMember 420 Unprotected Alternate Channel 1008 1018
HasMember 425 Direct Request ('Forced Browsing') 1008 1025
HasMember 426 Untrusted Search Path 1008 1028
HasMember 434 Unrestricted Upload of File with Dangerous Type 1008 1048
HasMember 527 Exposure of Version-Control Repository to an
Unauthorized Control Sphere
1008 1236
HasMember 528 Exposure of Core Dump File to an Unauthorized Control
Sphere
1008 1237
HasMember 529 Exposure of Access Control List Files to an
Unauthorized Control Sphere
1008 1238
HasMember 530 Exposure of Backup File to an Unauthorized Control
Sphere
1008 1239
HasMember 538 Insertion of Sensitive Information into Externally-
Accessible File or Directory
1008 1248
HasMember 551 Incorrect Behavior Order: Authorization Before Parsing
and Canonicalization
1008 1264
HasMember 552 Files or Directories Accessible to External Parties 1008 1265
CWE Version 4.14
CWE-1012: Cross Cutting
CWE-1012: Cross Cutting