2520
Nature Type ID Name Page
HasMember 278 Insecure Preserved Inherited Permissions 1400 669
HasMember 279 Incorrect Execution-Assigned Permissions 1400 671
HasMember 280 Improper Handling of Insufficient Permissions or
Privileges
1400 672
HasMember 281 Improper Preservation of Permissions 1400 674
HasMember 282 Improper Ownership Management 1400 676
HasMember 283 Unverified Ownership 1400 678
HasMember 284 Improper Access Control 1400 680
HasMember 285 Improper Authorization 1400 684
HasMember 286 Incorrect User Management 1400 691
HasMember 287 Improper Authentication 1400 692
HasMember 288 Authentication Bypass Using an Alternate Path or
Channel
1400 700
HasMember 289 Authentication Bypass by Alternate Name 1400 703
HasMember 290 Authentication Bypass by Spoofing 1400 705
HasMember 291 Reliance on IP Address for Authentication 1400 708
HasMember 293 Using Referer Field for Authentication 1400 710
HasMember 294 Authentication Bypass by Capture-replay 1400 712
HasMember 295 Improper Certificate Validation 1400 714
HasMember 296 Improper Following of a Certificate's Chain of Trust 1400 719
HasMember 297 Improper Validation of Certificate with Host Mismatch 1400 722
HasMember 298 Improper Validation of Certificate Expiration 1400 726
HasMember 299 Improper Check for Certificate Revocation 1400 727
HasMember 300 Channel Accessible by Non-Endpoint 1400 730
HasMember 301 Reflection Attack in an Authentication Protocol 1400 733
HasMember 302 Authentication Bypass by Assumed-Immutable Data 1400 735
HasMember 303 Incorrect Implementation of Authentication Algorithm 1400 737
HasMember 304 Missing Critical Step in Authentication 1400 738
HasMember 305 Authentication Bypass by Primary Weakness 1400 740
HasMember 306 Missing Authentication for Critical Function 1400 741
HasMember 307 Improper Restriction of Excessive Authentication
Attempts
1400 747
HasMember 308 Use of Single-factor Authentication 1400 752
HasMember 309 Use of Password System for Primary Authentication 1400 754
HasMember 321 Use of Hard-coded Cryptographic Key 1400 785
HasMember 322 Key Exchange without Entity Authentication 1400 788
HasMember 350 Reliance on Reverse DNS Resolution for a Security-
Critical Action
1400 863
HasMember 370 Missing Check for Certificate Revocation after Initial
Check
1400 917
HasMember 384 Session Fixation 1400 936
HasMember 419 Unprotected Primary Channel 1400 1017
HasMember 420 Unprotected Alternate Channel 1400 1018
HasMember 421 Race Condition During Access to Alternate Channel 1400 1020
HasMember 422 Unprotected Windows Messaging Channel ('Shatter') 1400 1022
HasMember 425 Direct Request ('Forced Browsing') 1400 1025
HasMember 441 Unintended Proxy or Intermediary ('Confused Deputy') 1400 1064
HasMember 520 .NET Misconfiguration: Use of Impersonation 1400 1222
HasMember 521 Weak Password Requirements 1400 1223
CWE Version 4.14
CWE-1396: Comprehensive Categorization: Access Control
CWE-1396: Comprehensive Categorization: Access Control