2372
Nature Type ID Name Page
HasMember 676 Use of Potentially Dangerous Function 900 1489
References
[REF-843]"2011 CWE/SANS Top 25 Most Dangerous Software Errors". 2011 June 7. < http://
cwe.mitre.org/top25/archive/2011/2011_cwe_sans_top25.html >.
Category-866: 2011 Top 25 - Porous Defenses
Category ID : 866
Summary
Weaknesses in this category are listed in the "Porous Defenses" section of the 2011 CWE/SANS
Top 25 Most Dangerous Software Errors.
Membership
Nature Type ID Name Page
MemberOf 900 Weaknesses in the 2011 CWE/SANS Top 25 Most
Dangerous Software Errors
900 2572
HasMember 250 Execution with Unnecessary Privileges 900 599
HasMember 306 Missing Authentication for Critical Function 900 741
HasMember 307 Improper Restriction of Excessive Authentication
Attempts
900 747
HasMember 311 Missing Encryption of Sensitive Data 900 757
HasMember 327 Use of a Broken or Risky Cryptographic Algorithm 900 799
HasMember 732 Incorrect Permission Assignment for Critical Resource 900 1551
HasMember 759 Use of a One-Way Hash without a Salt 900 1585
HasMember 798 Use of Hard-coded Credentials 900 1690
HasMember 807 Reliance on Untrusted Inputs in a Security Decision 900 1714
HasMember 862 Missing Authorization 900 1780
HasMember 863 Incorrect Authorization 900 1787
References
[REF-843]"2011 CWE/SANS Top 25 Most Dangerous Software Errors". 2011 June 7. < http://
cwe.mitre.org/top25/archive/2011/2011_cwe_sans_top25.html >.
Category-867: 2011 Top 25 - Weaknesses On the Cusp
Category ID : 867
Summary
Weaknesses in this category are not part of the general Top 25, but they were part of the original
nominee list from which the Top 25 was drawn.
Membership
Nature Type ID Name Page
MemberOf 900 Weaknesses in the 2011 CWE/SANS Top 25 Most
Dangerous Software Errors
900 2572
HasMember 129 Improper Validation of Array Index 900 341
CWE Version 4.14
CWE-869: CERT C++ Secure Coding Section 01 - Preprocessor (PRE)
CWE-869: CERT C++ Secure Coding Section 01 - Preprocessor (PRE)