2394
Category-945: SFP Secondary Cluster: Insecure Resource Access
Category ID : 945
Summary
This category identifies Software Fault Patterns (SFPs) within the Insecure Resource Access
cluster (SFP35).
Membership
Nature Type ID Name Page
MemberOf 899 SFP Primary Cluster: Access Control 888 2386
HasMember 285 Improper Authorization 888 684
HasMember 424 Improper Protection of Alternate Path 888 1023
HasMember 639 Authorization Bypass Through User-Controlled Key 888 1406
HasMember 650 Trusting HTTP Permission Methods on the Server Side 888 1432
Category-946: SFP Secondary Cluster: Insecure Resource Permissions
Category ID : 946
Summary
This category identifies Software Fault Patterns (SFPs) within the Insecure Resource Permissions
cluster.
Membership
Nature Type ID Name Page
MemberOf 899 SFP Primary Cluster: Access Control 888 2386
HasMember 276 Incorrect Default Permissions 888 665
HasMember 277 Insecure Inherited Permissions 888 668
HasMember 278 Insecure Preserved Inherited Permissions 888 669
HasMember 279 Incorrect Execution-Assigned Permissions 888 671
HasMember 281 Improper Preservation of Permissions 888 674
HasMember 560 Use of umask() with chmod-style Argument 888 1274
HasMember 732 Incorrect Permission Assignment for Critical Resource 888 1551
Category-947: SFP Secondary Cluster: Authentication Bypass
Category ID : 947
Summary
This category identifies Software Fault Patterns (SFPs) within the Authentication Bypass cluster.
Membership
Nature Type ID Name Page
MemberOf 898 SFP Primary Cluster: Authentication 888 2385
HasMember 287 Improper Authentication 888 692
HasMember 288 Authentication Bypass Using an Alternate Path or
Channel
888 700
HasMember 289 Authentication Bypass by Alternate Name 888 703
HasMember 303 Incorrect Implementation of Authentication Algorithm 888 737
CWE Version 4.14
CWE-948: SFP Secondary Cluster: Digital Certificate
CWE-948: SFP Secondary Cluster: Digital Certificate