2316
Nature Type ID Name Page
HasMember 620 Unverified Password Change 699 1383
HasMember 640 Weak Password Recovery Mechanism for Forgotten
Password
699 1409
HasMember 798 Use of Hard-coded Credentials 699 1690
HasMember 916 Use of Password Hash With Insufficient Computational
Effort
699 1813
HasMember 1392 Use of Default Credentials 699 2271
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
OWASP Top Ten 2004 A3 CWE More Specific Broken Authentication and Session
Management
References
[REF-1287]MITRE. "Supplemental Details - 2022 CWE Top 25". 2022 June 8. < https://
cwe.mitre.org/top25/archive/2022/2022_cwe_top25_supplemental.html#problematicMappingDetails
>.
Category-264: Permissions, Privileges, and Access Controls
Category ID : 264
Summary
Weaknesses in this category are related to the management of permissions, privileges, and other
security features that are used to perform access control.
Membership
Nature Type ID Name Page
MemberOf 635 Weaknesses Originally Used by NVD from 2008 to 2016 635 2552
MemberOf 1345 OWASP Top Ten 2021 Category A01:2021 - Broken
Access Control
1344 2487
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Permissions, Privileges, and ACLs
Notes
Maintenance
This entry heavily overlaps other categories and has been marked obsolete.
References
[REF-7]Michael Howard and David LeBlanc. "Writing Secure Code". 2nd Edition. 2002
December 4. Microsoft Press. < https://www.microsoftpressstore.com/store/writing-securecode-
9780735617223 >.
[REF-1287]MITRE. "Supplemental Details - 2022 CWE Top 25". 2022 June 8. < https://
cwe.mitre.org/top25/archive/2022/2022_cwe_top25_supplemental.html#problematicMappingDetails
>.
Category-265: Privilege Issues
Category ID : 265
CWE Version 4.14
CWE-275: Permission Issues
CWE-275: Permission Issues