2437
Nature Type ID Name Page
HasMember 319 Cleartext Transmission of Sensitive Information 1026 779
HasMember 320 Key Management Errors 1026 2319
HasMember 325 Missing Cryptographic Step 1026 794
HasMember 326 Inadequate Encryption Strength 1026 796
HasMember 327 Use of a Broken or Risky Cryptographic Algorithm 1026 799
HasMember 328 Use of Weak Hash 1026 806
HasMember 359 Exposure of Private Personal Information to an
Unauthorized Actor
1026 882
References
[REF-957]"Top 10 2017". 2017 April 2. OWASP. < https://owasp.org/www-pdf-archive/
OWASP_Top_10-2017_%28en%29.pdf.pdf >.
Category-1030: OWASP Top Ten 2017 Category A4 - XML External Entities
(XXE)
Category ID : 1030
Summary
Weaknesses in this category are related to the A4 category in the OWASP Top Ten 2017.
Membership
Nature Type ID Name Page
MemberOf 1026 Weaknesses in OWASP Top Ten (2017) 1026 2578
HasMember 611 Improper Restriction of XML External Entity Reference 1026 1367
HasMember 776 Improper Restriction of Recursive Entity References in
DTDs ('XML Entity Expansion')
1026 1633
References
[REF-957]"Top 10 2017". 2017 April 2. OWASP. < https://owasp.org/www-pdf-archive/
OWASP_Top_10-2017_%28en%29.pdf.pdf >.
Category-1031: OWASP Top Ten 2017 Category A5 - Broken Access Control
Category ID : 1031
Summary
Weaknesses in this category are related to the A5 category in the OWASP Top Ten 2017.
Membership
Nature Type ID Name Page
MemberOf 1026 Weaknesses in OWASP Top Ten (2017) 1026 2578
HasMember 22 Improper Limitation of a Pathname to a Restricted
Directory ('Path Traversal')
1026 33
HasMember 284 Improper Access Control 1026 680
HasMember 285 Improper Authorization 1026 684
HasMember 425 Direct Request ('Forced Browsing') 1026 1025
HasMember 639 Authorization Bypass Through User-Controlled Key 1026 1406
References
CWE Version 4.14
CWE-1032: OWASP Top Ten 2017 Category A6 - Security Misconfiguration
CWE-1032: OWASP Top Ten 2017 Category A6 - Security Misconfiguration