2529
Nature Type ID Name Page
HasMember 491 Public cloneable() Method Without Final ('Object Hijack') 1400 1174
HasMember 492 Use of Inner Class Containing Sensitive Data 1400 1175
HasMember 493 Critical Public Variable Without Final Modifier 1400 1182
HasMember 498 Cloneable Class Containing Sensitive Information 1400 1196
HasMember 499 Serializable Class Containing Sensitive Data 1400 1198
HasMember 500 Public Static Field Not Marked Final 1400 1200
HasMember 524 Use of Cache Containing Sensitive Information 1400 1232
HasMember 525 Use of Web Browser Cache Containing Sensitive
Information
1400 1233
HasMember 527 Exposure of Version-Control Repository to an
Unauthorized Control Sphere
1400 1236
HasMember 528 Exposure of Core Dump File to an Unauthorized Control
Sphere
1400 1237
HasMember 529 Exposure of Access Control List Files to an
Unauthorized Control Sphere
1400 1238
HasMember 530 Exposure of Backup File to an Unauthorized Control
Sphere
1400 1239
HasMember 539 Use of Persistent Cookies Containing Sensitive
Information
1400 1250
HasMember 552 Files or Directories Accessible to External Parties 1400 1265
HasMember 553 Command Shell in Externally Accessible Directory 1400 1269
HasMember 565 Reliance on Cookies without Validation and Integrity
Checking
1400 1283
HasMember 582 Array Declared Public, Final, and Static 1400 1314
HasMember 583 finalize() Method Declared Public 1400 1315
HasMember 608 Struts: Non-private Field in ActionForm Class 1400 1361
HasMember 619 Dangling Database Cursor ('Cursor Injection') 1400 1382
HasMember 642 External Control of Critical State Data 1400 1414
HasMember 668 Exposure of Resource to Wrong Sphere 1400 1469
HasMember 767 Access to Critical Private Variable via Public Method 1400 1610
HasMember 784 Reliance on Cookies without Validation and Integrity
Checking in a Security Decision
1400 1653
HasMember 1282 Assumed-Immutable Data is Stored in Writable Memory 1400 2127
HasMember 1327 Binding to an Unrestricted IP Address 1400 2215
References
[REF-1330]MITRE. "CVE --> CWE Mapping Guidance - Quick Tips". 2021 March 5. < https://
cwe.mitre.org/documents/cwe_usage/quick_tips.html >.
Category-1404: Comprehensive Categorization: File Handling
Category ID : 1404
Summary
Weaknesses in this category are related to file handling.
Membership
Nature Type ID Name Page
MemberOf 1400 Comprehensive Categorization for Software Assurance
Trends
1400 2598
CWE Version 4.14
CWE-1404: Comprehensive Categorization: File Handling
CWE-1404: Comprehensive Categorization: File Handling