2479
Weaknesses in this category are related to a software system's lockout mechanism. Frequently
these deal with scenarios that take effect in case of multiple failed attempts to access a given
resource. The weaknesses in this category could lead to a degradation of access to system assets
if they are not addressed.
Membership
Nature Type ID Name Page
MemberOf 699 Software Development 699 2555
MemberOf 1353 OWASP Top Ten 2021 Category A07:2021 -
Identification and Authentication Failures
1344 2494
HasMember 645 Overly Restrictive Account Lockout Mechanism 699 1423
Category-1217: User Session Errors
Category ID : 1217
Summary
Weaknesses in this category are related to session management. Frequently these deal with the
information or status about each user and their access rights for the duration of multiple requests.
The weaknesses in this category could lead to a degradation of the quality of session management
if they are not addressed.
Membership
Nature Type ID Name Page
MemberOf 699 Software Development 699 2555
HasMember 488 Exposure of Data Element to Wrong Session 699 1169
HasMember 613 Insufficient Session Expiration 699 1371
HasMember 841 Improper Enforcement of Behavioral Workflow 699 1772
Category-1218: Memory Buffer Errors
Category ID : 1218
Summary
Weaknesses in this category are related to the handling of memory buffers within a software
system.
Membership
Nature Type ID Name Page
MemberOf 699 Software Development 699 2555
HasMember 120 Buffer Copy without Checking Size of Input ('Classic
Buffer Overflow')
699 304
HasMember 124 Buffer Underwrite ('Buffer Underflow') 699 326
HasMember 125 Out-of-bounds Read 699 330
HasMember 131 Incorrect Calculation of Buffer Size 699 355
HasMember 786 Access of Memory Location Before Start of Buffer 699 1658
HasMember 787 Out-of-bounds Write 699 1661
HasMember 788 Access of Memory Location After End of Buffer 699 1669
HasMember 805 Buffer Access with Incorrect Length Value 699 1702
CWE Version 4.14
CWE-1219: File Handling Issues
CWE-1219: File Handling Issues