2395
Nature Type ID Name Page
HasMember 304 Missing Critical Step in Authentication 888 738
HasMember 305 Authentication Bypass by Primary Weakness 888 740
HasMember 308 Use of Single-factor Authentication 888 752
HasMember 309 Use of Password System for Primary Authentication 888 754
HasMember 603 Use of Client-Side Authentication 888 1354
Category-948: SFP Secondary Cluster: Digital Certificate
Category ID : 948
Summary
This category identifies Software Fault Patterns (SFPs) within the Digital Certificate cluster.
Membership
Nature Type ID Name Page
MemberOf 898 SFP Primary Cluster: Authentication 888 2385
HasMember 296 Improper Following of a Certificate's Chain of Trust 888 719
HasMember 297 Improper Validation of Certificate with Host Mismatch 888 722
HasMember 298 Improper Validation of Certificate Expiration 888 726
HasMember 299 Improper Check for Certificate Revocation 888 727
HasMember 593 Authentication Bypass: OpenSSL CTX Object Modified
after SSL Objects are Created
888 1331
HasMember 599 Missing Validation of OpenSSL Certificate 888 1341
Category-949: SFP Secondary Cluster: Faulty Endpoint Authentication
Category ID : 949
Summary
This category identifies Software Fault Patterns (SFPs) within the Faulty Endpoint Authentication
cluster (SFP29).
Membership
Nature Type ID Name Page
MemberOf 898 SFP Primary Cluster: Authentication 888 2385
HasMember 293 Using Referer Field for Authentication 888 710
HasMember 302 Authentication Bypass by Assumed-Immutable Data 888 735
HasMember 345 Insufficient Verification of Data Authenticity 888 851
HasMember 346 Origin Validation Error 888 853
HasMember 350 Reliance on Reverse DNS Resolution for a Security-
Critical Action
888 863
HasMember 360 Trust of System Event Data 888 887
HasMember 551 Incorrect Behavior Order: Authorization Before Parsing
and Canonicalization
888 1264
HasMember 565 Reliance on Cookies without Validation and Integrity
Checking
888 1283
HasMember 647 Use of Non-Canonical URL Paths for Authorization
Decisions
888 1426
CWE Version 4.14
CWE-950: SFP Secondary Cluster: Hardcoded Sensitive Data
CWE-950: SFP Secondary Cluster: Hardcoded Sensitive Data