2435
degradation of data integrity quality if they are not addressed when designing or implementing a
secure architecture.
Membership
Nature Type ID Name Page
MemberOf 1008 Architectural Concepts 1008 2577
HasMember 353 Missing Support for Integrity Check 1008 874
HasMember 354 Improper Validation of Integrity Check Value 1008 876
HasMember 390 Detection of Error Condition Without Action 1008 943
HasMember 391 Unchecked Error Condition 1008 948
HasMember 494 Download of Code Without Integrity Check 1008 1185
HasMember 565 Reliance on Cookies without Validation and Integrity
Checking
1008 1283
HasMember 649 Reliance on Obfuscation or Encryption of Security-
Relevant Inputs without Integrity Checking
1008 1430
HasMember 707 Improper Neutralization 1008 1546
HasMember 755 Improper Handling of Exceptional Conditions 1008 1576
HasMember 924 Improper Enforcement of Message Integrity During
Transmission in a Communication Channel
1008 1830
References
[REF-9]Santos, J. C. S., Tarrit, K. and Mirakhorli, M.. "A Catalog of Security Architecture
Weaknesses.". 2017 IEEE International Conference on Software Architecture (ICSA). 2017. <
https://design.se.rit.edu/papers/cawe-paper.pdf >.
[REF-10]Santos, J. C. S., Peruma, A., Mirakhorli, M., Galster, M. and Sejfia, A.. "Understanding
Software Vulnerabilities Related to Architectural Security Tactics: An Empirical Investigation of
Chromium, PHP and Thunderbird.". 2017 IEEE International Conference on Software Architecture
(ICSA). 2017. < https://design.se.rit.edu/papers/TacticalVulnerabilities.pdf >.
Category-1027: OWASP Top Ten 2017 Category A1 - Injection
Category ID : 1027
Summary
Weaknesses in this category are related to the A1 category in the OWASP Top Ten 2017.
Membership
Nature Type ID Name Page
MemberOf 1026 Weaknesses in OWASP Top Ten (2017) 1026 2578
HasMember 77 Improper Neutralization of Special Elements used in a
Command ('Command Injection')
1026 145
HasMember 78 Improper Neutralization of Special Elements used in an
OS Command ('OS Command Injection')
1026 151
HasMember 88 Improper Neutralization of Argument Delimiters in a
Command ('Argument Injection')
1026 194
HasMember 89 Improper Neutralization of Special Elements used in an
SQL Command ('SQL Injection')
1026 201
HasMember 90 Improper Neutralization of Special Elements used in an
LDAP Query ('LDAP Injection')
1026 212
HasMember 91 XML Injection (aka Blind XPath Injection) 1026 215
HasMember 564 SQL Injection: Hibernate 1026 1282
CWE Version 4.14
CWE-1028: OWASP Top Ten 2017 Category A2 - Broken Authentication
CWE-1028: OWASP Top Ten 2017 Category A2 - Broken Authentication