2519
Nature Type ID Name Page
HasMember 1261 Improper Handling of Single Event Upsets 1194 2079
HasMember 1278 Missing Protection Against Hardware Reverse
Engineering Using Integrated Circuit (IC) Imaging
Techniques
1194 2118
HasMember 1300 Improper Protection of Physical Side Channels 1194 2165
HasMember 1319 Improper Protection against Electromagnetic Fault
Injection (EM-FI)
1194 2199
HasMember 1332 Improper Handling of Faults that Lead to Instruction
Skips
1194 2227
HasMember 1351 Improper Handling of Hardware Behavior in
Exceptionally Cold Environments
1194 2252
HasMember 1384 Improper Handling of Physical or Environmental
Conditions
1194 2257
Category-1396: Comprehensive Categorization: Access Control
Category ID : 1396
Summary
Weaknesses in this category are related to access control.
Membership
Nature Type ID Name Page
MemberOf 1400 Comprehensive Categorization for Software Assurance
Trends
1400 2598
HasMember 9 J2EE Misconfiguration: Weak Access Permissions for
EJB Methods
1400 8
HasMember 13 ASP.NET Misconfiguration: Password in Configuration
File
1400 13
HasMember 202 Exposure of Sensitive Information Through Data
Queries
1400 516
HasMember 256 Plaintext Storage of a Password 1400 615
HasMember 257 Storing Passwords in a Recoverable Format 1400 618
HasMember 258 Empty Password in Configuration File 1400 621
HasMember 259 Use of Hard-coded Password 1400 623
HasMember 260 Password in Configuration File 1400 629
HasMember 261 Weak Encoding for Password 1400 631
HasMember 262 Not Using Password Aging 1400 633
HasMember 263 Password Aging with Long Expiration 1400 636
HasMember 266 Incorrect Privilege Assignment 1400 638
HasMember 267 Privilege Defined With Unsafe Actions 1400 641
HasMember 268 Privilege Chaining 1400 644
HasMember 269 Improper Privilege Management 1400 646
HasMember 270 Privilege Context Switching Error 1400 651
HasMember 271 Privilege Dropping / Lowering Errors 1400 653
HasMember 272 Least Privilege Violation 1400 656
HasMember 273 Improper Check for Dropped Privileges 1400 660
HasMember 274 Improper Handling of Insufficient Privileges 1400 663
HasMember 276 Incorrect Default Permissions 1400 665
HasMember 277 Insecure Inherited Permissions 1400 668
CWE Version 4.14
CWE-1396: Comprehensive Categorization: Access Control
CWE-1396: Comprehensive Categorization: Access Control