2386
Nature Type ID Name Page
HasMember 948 SFP Secondary Cluster: Digital Certificate 888 2395
HasMember 949 SFP Secondary Cluster: Faulty Endpoint Authentication 888 2395
HasMember 950 SFP Secondary Cluster: Hardcoded Sensitive Data 888 2396
HasMember 951 SFP Secondary Cluster: Insecure Authentication Policy 888 2396
HasMember 952 SFP Secondary Cluster: Missing Authentication 888 2396
HasMember 953 SFP Secondary Cluster: Missing Endpoint
Authentication
888 2397
HasMember 954 SFP Secondary Cluster: Multiple Binds to the Same
Port
888 2397
HasMember 955 SFP Secondary Cluster: Unrestricted Authentication 888 2397
Category-899: SFP Primary Cluster: Access Control
Category ID : 899
Summary
This category identifies Software Fault Patterns (SFPs) within the Access Control cluster (SFP35).
Membership
Nature Type ID Name Page
MemberOf 888 Software Fault Pattern (SFP) Clusters 888 2571
HasMember 944 SFP Secondary Cluster: Access Management 888 2393
HasMember 945 SFP Secondary Cluster: Insecure Resource Access 888 2394
HasMember 946 SFP Secondary Cluster: Insecure Resource
Permissions
888 2394
Category-901: SFP Primary Cluster: Privilege
Category ID : 901
Summary
This category identifies Software Fault Patterns (SFPs) within the Privilege cluster (SFP36).
Membership
Nature Type ID Name Page
MemberOf 888 Software Fault Pattern (SFP) Clusters 888 2571
HasMember 9 J2EE Misconfiguration: Weak Access Permissions for
EJB Methods
888 8
HasMember 250 Execution with Unnecessary Privileges 888 599
HasMember 266 Incorrect Privilege Assignment 888 638
HasMember 267 Privilege Defined With Unsafe Actions 888 641
HasMember 268 Privilege Chaining 888 644
HasMember 269 Improper Privilege Management 888 646
HasMember 270 Privilege Context Switching Error 888 651
HasMember 271 Privilege Dropping / Lowering Errors 888 653
HasMember 272 Least Privilege Violation 888 656
HasMember 274 Improper Handling of Insufficient Privileges 888 663
HasMember 520 .NET Misconfiguration: Use of Impersonation 888 1222
CWE Version 4.14
CWE-902: SFP Primary Cluster: Channel
CWE-902: SFP Primary Cluster: Channel