2430
Nature Type ID Name Page
MemberOf 1008 Architectural Concepts 1008 2577
HasMember 295 Improper Certificate Validation 1008 714
HasMember 296 Improper Following of a Certificate's Chain of Trust 1008 719
HasMember 297 Improper Validation of Certificate with Host Mismatch 1008 722
HasMember 298 Improper Validation of Certificate Expiration 1008 726
HasMember 299 Improper Check for Certificate Revocation 1008 727
HasMember 345 Insufficient Verification of Data Authenticity 1008 851
HasMember 346 Origin Validation Error 1008 853
HasMember 370 Missing Check for Certificate Revocation after Initial
Check
1008 917
HasMember 441 Unintended Proxy or Intermediary ('Confused Deputy') 1008 1064
HasMember 599 Missing Validation of OpenSSL Certificate 1008 1341
HasMember 940 Improper Verification of Source of a Communication
Channel
1008 1842
HasMember 941 Incorrectly Specified Destination in a Communication
Channel
1008 1845
References
[REF-9]Santos, J. C. S., Tarrit, K. and Mirakhorli, M.. "A Catalog of Security Architecture
Weaknesses.". 2017 IEEE International Conference on Software Architecture (ICSA). 2017. <
https://design.se.rit.edu/papers/cawe-paper.pdf >.
[REF-10]Santos, J. C. S., Peruma, A., Mirakhorli, M., Galster, M. and Sejfia, A.. "Understanding
Software Vulnerabilities Related to Architectural Security Tactics: An Empirical Investigation of
Chromium, PHP and Thunderbird.". 2017 IEEE International Conference on Software Architecture
(ICSA). 2017. < https://design.se.rit.edu/papers/TacticalVulnerabilities.pdf >.
Category-1015: Limit Access
Category ID : 1015
Summary
Weaknesses in this category are related to the design and architecture of system resources.
Frequently these deal with restricting the amount of resources that are accessed by actors, such
as memory, network connections, CPU or access points. The weaknesses in this category could
lead to a degradation of the quality of authentication if they are not addressed when designing or
implementing a secure architecture.
Membership
Nature Type ID Name Page
MemberOf 1008 Architectural Concepts 1008 2577
HasMember 73 External Control of File Name or Path 1008 132
HasMember 201 Insertion of Sensitive Information Into Sent Data 1008 514
HasMember 209 Generation of Error Message Containing Sensitive
Information
1008 533
HasMember 212 Improper Removal of Sensitive Information Before
Storage or Transfer
1008 544
HasMember 243 Creation of chroot Jail Without Changing Working
Directory
1008 589
HasMember 250 Execution with Unnecessary Privileges 1008 599
CWE Version 4.14
CWE-1016: Limit Exposure
CWE-1016: Limit Exposure