2403
Summary
This category identifies Software Fault Patterns (SFPs) within the Exposure Temporary File cluster.
Membership
Nature Type ID Name Page
MemberOf 895 SFP Primary Cluster: Information Leak 888 2384
HasMember 377 Insecure Temporary File 888 925
HasMember 378 Creation of Temporary File With Insecure Permissions 888 928
HasMember 379 Creation of Temporary File in Directory with Insecure
Permissions
888 930
Category-965: SFP Secondary Cluster: Insecure Session Management
Category ID : 965
Summary
This category identifies Software Fault Patterns (SFPs) within the Insecure Session Management
cluster.
Membership
Nature Type ID Name Page
MemberOf 895 SFP Primary Cluster: Information Leak 888 2384
HasMember 6 J2EE Misconfiguration: Insufficient Session-ID Length 888 2
HasMember 488 Exposure of Data Element to Wrong Session 888 1169
HasMember 524 Use of Cache Containing Sensitive Information 888 1232
Category-966: SFP Secondary Cluster: Other Exposures
Category ID : 966
Summary
This category identifies Software Fault Patterns (SFPs) within the Other Exposures cluster.
Membership
Nature Type ID Name Page
MemberOf 895 SFP Primary Cluster: Information Leak 888 2384
HasMember 453 Insecure Default Variable Initialization 888 1083
HasMember 487 Reliance on Package-level Scope 888 1167
HasMember 492 Use of Inner Class Containing Sensitive Data 888 1175
HasMember 525 Use of Web Browser Cache Containing Sensitive
Information
888 1233
HasMember 614 Sensitive Cookie in HTTPS Session Without 'Secure'
Attribute
888 1373
HasMember 651 Exposure of WSDL File Containing Sensitive
Information
888 1433
Category-967: SFP Secondary Cluster: State Disclosure
Category ID : 967
CWE Version 4.14
CWE-968: SFP Secondary Cluster: Covert Channel
CWE-968: SFP Secondary Cluster: Covert Channel