2476
Membership
Nature Type ID Name Page
MemberOf 699 Software Development 699 2555
HasMember 289 Authentication Bypass by Alternate Name 699 703
HasMember 290 Authentication Bypass by Spoofing 699 705
HasMember 294 Authentication Bypass by Capture-replay 699 712
HasMember 295 Improper Certificate Validation 699 714
HasMember 301 Reflection Attack in an Authentication Protocol 699 733
HasMember 303 Incorrect Implementation of Authentication Algorithm 699 737
HasMember 305 Authentication Bypass by Primary Weakness 699 740
HasMember 306 Missing Authentication for Critical Function 699 741
HasMember 307 Improper Restriction of Excessive Authentication
Attempts
699 747
HasMember 308 Use of Single-factor Authentication 699 752
HasMember 309 Use of Password System for Primary Authentication 699 754
HasMember 322 Key Exchange without Entity Authentication 699 788
HasMember 603 Use of Client-Side Authentication 699 1354
HasMember 645 Overly Restrictive Account Lockout Mechanism 699 1423
HasMember 804 Guessable CAPTCHA 699 1701
HasMember 836 Use of Password Hash Instead of Password for
Authentication
699 1761
Category-1212: Authorization Errors
Category ID : 1212
Summary
Weaknesses in this category are related to authorization components of a system. Frequently
these deal with the ability to enforce that agents have the required permissions before performing
certain operations, such as modifying data. If not addressed when designing or implementing a
software system, these weaknesses could lead to a degradation of the quality of the authorization
capability.
Membership
Nature Type ID Name Page
MemberOf 699 Software Development 699 2555
HasMember 425 Direct Request ('Forced Browsing') 699 1025
HasMember 551 Incorrect Behavior Order: Authorization Before Parsing
and Canonicalization
699 1264
HasMember 552 Files or Directories Accessible to External Parties 699 1265
HasMember 639 Authorization Bypass Through User-Controlled Key 699 1406
HasMember 653 Improper Isolation or Compartmentalization 699 1437
HasMember 842 Placement of User into Incorrect Group 699 1775
HasMember 939 Improper Authorization in Handler for Custom URL
Scheme
699 1840
HasMember 1220 Insufficient Granularity of Access Control 699 1992
HasMember 1230 Exposure of Sensitive Information Through Metadata 699 2006
CWE Version 4.14
CWE-1213: Random Number Issues
CWE-1213: Random Number Issues