2399
Summary
This category identifies Software Fault Patterns (SFPs) within the Weak Cryptography cluster.
Membership
Nature Type ID Name Page
MemberOf 903 SFP Primary Cluster: Cryptography 888 2387
HasMember 261 Weak Encoding for Password 888 631
HasMember 322 Key Exchange without Entity Authentication 888 788
HasMember 323 Reusing a Nonce, Key Pair in Encryption 888 790
HasMember 324 Use of a Key Past its Expiration Date 888 792
HasMember 326 Inadequate Encryption Strength 888 796
HasMember 329 Generation of Predictable IV with CBC Mode 888 811
HasMember 347 Improper Verification of Cryptographic Signature 888 857
HasMember 640 Weak Password Recovery Mechanism for Forgotten
Password
888 1409
Category-960: SFP Secondary Cluster: Ambiguous Exception Type
Category ID : 960
Summary
This category identifies Software Fault Patterns (SFPs) within the Ambiguous Exception Type
cluster (SFP5).
Membership
Nature Type ID Name Page
MemberOf 889 SFP Primary Cluster: Exception Management 888 2382
HasMember 396 Declaration of Catch for Generic Exception 888 959
HasMember 397 Declaration of Throws for Generic Exception 888 961
Category-961: SFP Secondary Cluster: Incorrect Exception Behavior
Category ID : 961
Summary
This category identifies Software Fault Patterns (SFPs) within the Incorrect Exception Behavior
cluster (SFP6).
Membership
Nature Type ID Name Page
MemberOf 889 SFP Primary Cluster: Exception Management 888 2382
HasMember 392 Missing Report of Error Condition 888 951
HasMember 393 Return of Wrong Status Code 888 953
HasMember 455 Non-exit on Failed Initialization 888 1087
HasMember 460 Improper Cleanup on Thrown Exception 888 1102
HasMember 544 Missing Standardized Error Handling Mechanism 888 1256
HasMember 584 Return Inside Finally Block 888 1317
HasMember 636 Not Failing Securely ('Failing Open') 888 1401
CWE Version 4.14
CWE-962: SFP Secondary Cluster: Unchecked Status Condition
CWE-962: SFP Secondary Cluster: Unchecked Status Condition