2359
[REF-766]OWASP. "Top 10 2010-A6-Security Misconfiguration". < http://www.owasp.org/
index.php/Top_10_2010-A6-Security_Misconfiguration >.
Category-816: OWASP Top Ten 2010 Category A7 - Insecure Cryptographic
Storage
Category ID : 816
Summary
Weaknesses in this category are related to the A7 category in the OWASP Top Ten 2010.
Membership
Nature Type ID Name Page
MemberOf 809 Weaknesses in OWASP Top Ten (2010) 809 2563
HasMember 311 Missing Encryption of Sensitive Data 809 757
HasMember 312 Cleartext Storage of Sensitive Information 809 764
HasMember 326 Inadequate Encryption Strength 809 796
HasMember 327 Use of a Broken or Risky Cryptographic Algorithm 809 799
HasMember 759 Use of a One-Way Hash without a Salt 809 1585
References
[REF-767]OWASP. "Top 10 2010-A7-Insecure Cryptographic Storage". < http://www.owasp.org/
index.php/Top_10_2010-A7-Insecure_Cryptographic_Storage >.
Category-817: OWASP Top Ten 2010 Category A8 - Failure to Restrict URL
Access
Category ID : 817
Summary
Weaknesses in this category are related to the A8 category in the OWASP Top Ten 2010.
Membership
Nature Type ID Name Page
MemberOf 809 Weaknesses in OWASP Top Ten (2010) 809 2563
HasMember 285 Improper Authorization 809 684
HasMember 862 Missing Authorization 809 1780
HasMember 863 Incorrect Authorization 809 1787
References
[REF-768]OWASP. "Top 10 2010-A8-Failure to Restrict URL Access". < http://www.owasp.org/
index.php/Top_10_2010-A8-Failure_to_Restrict_URL_Access >.
Category-818: OWASP Top Ten 2010 Category A9 - Insufficient Transport
Layer Protection
Category ID : 818
Summary
CWE Version 4.14
CWE-819: OWASP Top Ten 2010 Category A10 - Unvalidated Redirects and Forwards
CWE-819: OWASP Top Ten 2010 Category
A10 - Unvalidated Redirects and Forwards 2360
Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2010.
Membership
Nature Type ID Name Page
MemberOf 809 Weaknesses in OWASP Top Ten (2010) 809 2563
MemberOf 1346 OWASP Top Ten 2021 Category A02:2021 -
Cryptographic Failures
1344 2488
HasMember 311 Missing Encryption of Sensitive Data 809 757
HasMember 319 Cleartext Transmission of Sensitive Information 809 779
References
[REF-769]OWASP. "Top 10 2010-A9-Insufficient Transport Layer Protection". < http://
www.owasp.org/index.php/Top_10_2010-A9-Insufficient_Transport_Layer_Protection >.
Category-819: OWASP Top Ten 2010 Category A10 - Unvalidated Redirects
and Forwards
Category ID : 819
Summary
Weaknesses in this category are related to the A10 category in the OWASP Top Ten 2010.
Membership
Nature Type ID Name Page
MemberOf 809 Weaknesses in OWASP Top Ten (2010) 809 2563
HasMember 601 URL Redirection to Untrusted Site ('Open Redirect') 809 1345
References
[REF-770]OWASP. "Top 10 2010-A10-Unvalidated Redirects and Forwards". < http://
www.owasp.org/index.php/Top_10_2010-A10-Unvalidated_Redirects_and_Forwards >.
Category-840: Business Logic Errors
Category ID : 840
Summary
Weaknesses in this category identify some of the underlying problems that commonly allow
attackers to manipulate the business logic of an application. Errors in business logic can be
devastating to an entire application. They can be difficult to find automatically, since they typically
involve legitimate use of the application's functionality. However, many business logic errors can
exhibit patterns that are similar to well-understood implementation and design weaknesses.
Membership
Nature Type ID Name Page
MemberOf 699 Software Development 699 2555
MemberOf 1348 OWASP Top Ten 2021 Category A04:2021 - Insecure
Design
1344 2491
HasMember 283 Unverified Ownership 699 678
HasMember 639 Authorization Bypass Through User-Controlled Key 699 1406
HasMember 640 Weak Password Recovery Mechanism for Forgotten
Password
699 1409
CWE Version 4.14
CWE-840: Business Logic Errors
CWE-840: Business Logic Errors