2390
Summary
Weaknesses in this category are related to the A2 category in the OWASP Top Ten 2013.
Membership
Nature Type ID Name Page
MemberOf 928 Weaknesses in OWASP Top Ten (2013) 928 2574
HasMember 256 Plaintext Storage of a Password 928 615
HasMember 287 Improper Authentication 928 692
HasMember 311 Missing Encryption of Sensitive Data 928 757
HasMember 384 Session Fixation 928 936
HasMember 522 Insufficiently Protected Credentials 928 1225
HasMember 523 Unprotected Transport of Credentials 928 1230
HasMember 613 Insufficient Session Expiration 928 1371
HasMember 620 Unverified Password Change 928 1383
HasMember 640 Weak Password Recovery Mechanism for Forgotten
Password
928 1409
References
[REF-929]OWASP. "Top 10 2013-A2-Broken Authentication and Session Management". < https://
www.owasp.org/index.php/Top_10_2013-A2-Broken_Authentication_and_Session_Management >.
Category-931: OWASP Top Ten 2013 Category A3 - Cross-Site Scripting (XSS)
Category ID : 931
Summary
Weaknesses in this category are related to the A3 category in the OWASP Top Ten 2013.
Membership
Nature Type ID Name Page
MemberOf 928 Weaknesses in OWASP Top Ten (2013) 928 2574
HasMember 79 Improper Neutralization of Input During Web Page
Generation ('Cross-site Scripting')
928 163
References
[REF-930]OWASP. "Top 10 2013-A3-Cross-Site Scripting (XSS)". < https://www.owasp.org/
index.php/Top_10_2013-A3-Cross-Site_Scripting_%28XSS%29 >.
Category-932: OWASP Top Ten 2013 Category A4 - Insecure Direct Object
References
Category ID : 932
Summary
Weaknesses in this category are related to the A4 category in the OWASP Top Ten 2013.
Membership
Nature Type ID Name Page
MemberOf 928 Weaknesses in OWASP Top Ten (2013) 928 2574
CWE Version 4.14
CWE-933: OWASP Top Ten 2013 Category A5 - Security Misconfiguration
CWE-933: OWASP Top Ten 2013 Category A5 - Security Misconfiguration