2487
Nature Type ID Name Page
HasMember 1049 Excessive Data Query Operations in a Large Data
Table
1305 1884
HasMember 1050 Excessive Platform Resource Consumption within a
Loop
1305 1885
HasMember 1057 Data Access Operations Outside of Expected Data
Manager Component
1305 1892
HasMember 1060 Excessive Number of Inefficient Server-Side Data
Accesses
1305 1897
HasMember 1067 Excessive Execution of Sequential Searches of Data
Resource
1305 1905
HasMember 1072 Data Resource Access without Use of Connection
Pooling
1305 1912
HasMember 1073 Non-SQL Invokable Control Element with Excessive
Number of Data Resource Accesses
1305 1913
HasMember 1089 Large Data Table with Excessive Number of Indices 1305 1929
HasMember 1091 Use of Object without Invoking Destructor Method 1305 1931
HasMember 1094 Excessive Index Range Scan for a Data Resource 1305 1934
References
[REF-1133]Consortium for Information & Software Quality (CISQ). "Automated Source Code
Quality Measures". 2020. < https://www.omg.org/spec/ASCQM/ >.
Category-1345: OWASP Top Ten 2021 Category A01:2021 - Broken Access
Control
Category ID : 1345
Summary
Weaknesses in this category are related to the A01 category "Broken Access Control" in the
OWASP Top Ten 2021.
Membership
Nature Type ID Name Page
MemberOf 1344 Weaknesses in OWASP Top Ten (2021) 1344 2593
HasMember 22 Improper Limitation of a Pathname to a Restricted
Directory ('Path Traversal')
1344 33
HasMember 23 Relative Path Traversal 1344 46
HasMember 35 Path Traversal: '.../...//' 1344 73
HasMember 59 Improper Link Resolution Before File Access ('Link
Following')
1344 111
HasMember 200 Exposure of Sensitive Information to an Unauthorized
Actor
1344 504
HasMember 201 Insertion of Sensitive Information Into Sent Data 1344 514
HasMember 219 Storage of File with Sensitive Data Under Web Root 1344 553
HasMember 264 Permissions, Privileges, and Access Controls 1344 2316
HasMember 275 Permission Issues 1344 2317
HasMember 276 Incorrect Default Permissions 1344 665
HasMember 284 Improper Access Control 1344 680
HasMember 285 Improper Authorization 1344 684
HasMember 352 Cross-Site Request Forgery (CSRF) 1344 868
CWE Version 4.14
CWE-1346: OWASP Top Ten 2021 Category A02:2021 - Cryptographic Failures
CWE-1346: OWASP Top Ten 2021 Category A02:2021 - Cryptographic Failures