2528
Nature Type ID Name Page
HasMember 328 Use of Weak Hash 1400 806
HasMember 347 Improper Verification of Cryptographic Signature 1400 857
HasMember 614 Sensitive Cookie in HTTPS Session Without 'Secure'
Attribute
1400 1373
HasMember 759 Use of a One-Way Hash without a Salt 1400 1585
HasMember 760 Use of a One-Way Hash with a Predictable Salt 1400 1589
HasMember 780 Use of RSA Algorithm without OAEP 1400 1644
HasMember 916 Use of Password Hash With Insufficient Computational
Effort
1400 1813
HasMember 1240 Use of a Cryptographic Primitive with a Risky
Implementation
1400 2025
References
[REF-1330]MITRE. "CVE --> CWE Mapping Guidance - Quick Tips". 2021 March 5. < https://
cwe.mitre.org/documents/cwe_usage/quick_tips.html >.
Category-1403: Comprehensive Categorization: Exposed Resource
Category ID : 1403
Summary
Weaknesses in this category are related to exposed resource.
Membership
Nature Type ID Name Page
MemberOf 1400 Comprehensive Categorization for Software Assurance
Trends
1400 2598
HasMember 8 J2EE Misconfiguration: Entity Bean Declared Remote 1400 6
HasMember 15 External Control of System or Configuration Setting 1400 17
HasMember 73 External Control of File Name or Path 1400 132
HasMember 114 Process Control 1400 277
HasMember 219 Storage of File with Sensitive Data Under Web Root 1400 553
HasMember 220 Storage of File With Sensitive Data Under FTP Root 1400 555
HasMember 374 Passing Mutable Objects to an Untrusted Method 1400 920
HasMember 375 Returning a Mutable Object to an Untrusted Caller 1400 923
HasMember 377 Insecure Temporary File 1400 925
HasMember 378 Creation of Temporary File With Insecure Permissions 1400 928
HasMember 379 Creation of Temporary File in Directory with Insecure
Permissions
1400 930
HasMember 402 Transmission of Private Resources into a New Sphere
('Resource Leak')
1400 976
HasMember 403 Exposure of File Descriptor to Unintended Control
Sphere ('File Descriptor Leak')
1400 978
HasMember 426 Untrusted Search Path 1400 1028
HasMember 427 Uncontrolled Search Path Element 1400 1033
HasMember 428 Unquoted Search Path or Element 1400 1039
HasMember 433 Unparsed Raw Web Content Delivery 1400 1046
HasMember 472 External Control of Assumed-Immutable Web
Parameter
1400 1123
HasMember 488 Exposure of Data Element to Wrong Session 1400 1169
CWE Version 4.14
CWE-1404: Comprehensive Categorization: File Handling
CWE-1404: Comprehensive Categorization: File Handling