2335
References
[REF-581]OWASP. "A1 Unvalidated Input". 2007. < http://sourceforge.net/project/showfiles.php?
group_id=64424&package_id=70827 >.
Category-723: OWASP Top Ten 2004 Category A2 - Broken Access Control
Category ID : 723
Summary
Weaknesses in this category are related to the A2 category in the OWASP Top Ten 2004.
Membership
Nature Type ID Name Page
MemberOf 711 Weaknesses in OWASP Top Ten (2004) 711 2559
HasMember 9 J2EE Misconfiguration: Weak Access Permissions for
EJB Methods
711 8
HasMember 22 Improper Limitation of a Pathname to a Restricted
Directory ('Path Traversal')
711 33
HasMember 41 Improper Resolution of Path Equivalence 711 86
HasMember 73 External Control of File Name or Path 711 132
HasMember 266 Incorrect Privilege Assignment 711 638
HasMember 268 Privilege Chaining 711 644
HasMember 275 Permission Issues 711 2317
HasMember 283 Unverified Ownership 711 678
HasMember 284 Improper Access Control 711 680
HasMember 285 Improper Authorization 711 684
HasMember 330 Use of Insufficiently Random Values 711 814
HasMember 425 Direct Request ('Forced Browsing') 711 1025
HasMember 525 Use of Web Browser Cache Containing Sensitive
Information
711 1233
HasMember 551 Incorrect Behavior Order: Authorization Before Parsing
and Canonicalization
711 1264
HasMember 556 ASP.NET Misconfiguration: Use of Identity
Impersonation
711 1271
HasMember 639 Authorization Bypass Through User-Controlled Key 711 1406
HasMember 708 Incorrect Ownership Assignment 711 1548
References
[REF-582]OWASP. "A2 Broken Access Control". 2007. < http://sourceforge.net/project/
showfiles.php?group_id=64424&package_id=70827 >.
Category-724: OWASP Top Ten 2004 Category A3 - Broken Authentication and
Session Management
Category ID : 724
Summary
Weaknesses in this category are related to the A3 category in the OWASP Top Ten 2004.
Membership
CWE Version 4.14
CWE-725: OWASP Top Ten 2004 Category A4 - Cross-Site Scripting (XSS) Flaws
CWE-725: OWASP Top Ten 2004 Category A4 - Cross-Site Scripting (XSS) Flaws