2385
Nature Type ID Name Page
HasMember 963 SFP Secondary Cluster: Exposed Data 888 2400
HasMember 964 SFP Secondary Cluster: Exposure Temporary File 888 2402
HasMember 965 SFP Secondary Cluster: Insecure Session Management 888 2403
HasMember 966 SFP Secondary Cluster: Other Exposures 888 2403
HasMember 967 SFP Secondary Cluster: State Disclosure 888 2403
Category-896: SFP Primary Cluster: Tainted Input
Category ID : 896
Summary
This category identifies Software Fault Patterns (SFPs) within the Tainted Input cluster (SFP24,
SFP25, SFP26, SFP27).
Membership
Nature Type ID Name Page
MemberOf 888 Software Fault Pattern (SFP) Clusters 888 2571
HasMember 990 SFP Secondary Cluster: Tainted Input to Command 888 2413
HasMember 991 SFP Secondary Cluster: Tainted Input to Environment 888 2416
HasMember 992 SFP Secondary Cluster: Faulty Input Transformation 888 2416
HasMember 993 SFP Secondary Cluster: Incorrect Input Handling 888 2417
HasMember 994 SFP Secondary Cluster: Tainted Input to Variable 888 2417
Category-897: SFP Primary Cluster: Entry Points
Category ID : 897
Summary
This category identifies Software Fault Patterns (SFPs) within the Entry Points cluster (SFP28).
Membership
Nature Type ID Name Page
MemberOf 888 Software Fault Pattern (SFP) Clusters 888 2571
HasMember 1002 SFP Secondary Cluster: Unexpected Entry Points 888 2421
Category-898: SFP Primary Cluster: Authentication
Category ID : 898
Summary
This category identifies Software Fault Patterns (SFPs) within the Authentication cluster (SFP29,
SFP30, SFP31, SFP32, SFP33, SFP34).
Membership
Nature Type ID Name Page
MemberOf 888 Software Fault Pattern (SFP) Clusters 888 2571
HasMember 947 SFP Secondary Cluster: Authentication Bypass 888 2394
CWE Version 4.14
CWE-899: SFP Primary Cluster: Access Control
CWE-899: SFP Primary Cluster: Access Control