2338
Summary
Weaknesses in this category are related to the A7 category in the OWASP Top Ten 2004.
Membership
Nature Type ID Name Page
MemberOf 711 Weaknesses in OWASP Top Ten (2004) 711 2559
HasMember 7 J2EE Misconfiguration: Missing Custom Error Page 711 4
HasMember 203 Observable Discrepancy 711 518
HasMember 209 Generation of Error Message Containing Sensitive
Information
711 533
HasMember 228 Improper Handling of Syntactically Invalid Structure 711 568
HasMember 252 Unchecked Return Value 711 606
HasMember 389 Error Conditions, Return Values, Status Codes 711 2322
HasMember 390 Detection of Error Condition Without Action 711 943
HasMember 391 Unchecked Error Condition 711 948
HasMember 394 Unexpected Status Code or Return Value 711 955
HasMember 636 Not Failing Securely ('Failing Open') 711 1401
References
[REF-587]OWASP. "A7 Improper Error Handling". 2007. < http://sourceforge.net/project/
showfiles.php?group_id=64424&package_id=70827 >.
Category-729: OWASP Top Ten 2004 Category A8 - Insecure Storage
Category ID : 729
Summary
Weaknesses in this category are related to the A8 category in the OWASP Top Ten 2004.
Membership
Nature Type ID Name Page
MemberOf 711 Weaknesses in OWASP Top Ten (2004) 711 2559
HasMember 14 Compiler Removal of Code to Clear Buffers 711 14
HasMember 226 Sensitive Information in Resource Not Removed Before
Reuse
711 562
HasMember 261 Weak Encoding for Password 711 631
HasMember 311 Missing Encryption of Sensitive Data 711 757
HasMember 321 Use of Hard-coded Cryptographic Key 711 785
HasMember 326 Inadequate Encryption Strength 711 796
HasMember 327 Use of a Broken or Risky Cryptographic Algorithm 711 799
HasMember 539 Use of Persistent Cookies Containing Sensitive
Information
711 1250
HasMember 591 Sensitive Data Storage in Improperly Locked Memory 711 1329
HasMember 598 Use of GET Request Method With Sensitive Query
Strings
711 1340
References
[REF-588]OWASP. "A8 Insecure Storage". 2007. < http://sourceforge.net/project/showfiles.php?
group_id=64424&package_id=70827 >.
CWE Version 4.14
CWE-730: OWASP Top Ten 2004 Category A9 - Denial of Service
CWE-730: OWASP Top Ten 2004 Category A9 - Denial of Service