2549
Nature Type ID Name Page
HasMember 359 Exposure of Private Personal Information to an
Unauthorized Actor
1400 882
HasMember 497 Exposure of Sensitive System Information to an
Unauthorized Control Sphere
1400 1193
HasMember 526 Cleartext Storage of Sensitive Information in an
Environment Variable
1400 1234
HasMember 531 Inclusion of Sensitive Information in Test Code 1400 1240
HasMember 532 Insertion of Sensitive Information into Log File 1400 1241
HasMember 535 Exposure of Information Through Shell Error Message 1400 1244
HasMember 536 Servlet Runtime Error Message Containing Sensitive
Information
1400 1245
HasMember 537 Java Runtime Error Message Containing Sensitive
Information
1400 1246
HasMember 538 Insertion of Sensitive Information into Externally-
Accessible File or Directory
1400 1248
HasMember 540 Inclusion of Sensitive Information in Source Code 1400 1251
HasMember 541 Inclusion of Sensitive Information in an Include File 1400 1253
HasMember 548 Exposure of Information Through Directory Listing 1400 1261
HasMember 550 Server-generated Error Message Containing Sensitive
Information
1400 1263
HasMember 598 Use of GET Request Method With Sensitive Query
Strings
1400 1340
HasMember 615 Inclusion of Sensitive Information in Source Code
Comments
1400 1375
HasMember 651 Exposure of WSDL File Containing Sensitive
Information
1400 1433
HasMember 1254 Incorrect Comparison Logic Granularity 1400 2060
HasMember 1255 Comparison Logic is Vulnerable to Power Side-Channel
Attacks
1400 2062
HasMember 1273 Device Unlock Credential Sharing 1400 2106
HasMember 1295 Debug Messages Revealing Unnecessary Information 1400 2152
HasMember 1300 Improper Protection of Physical Side Channels 1400 2165
References
[REF-1330]MITRE. "CVE --> CWE Mapping Guidance - Quick Tips". 2021 March 5. < https://
cwe.mitre.org/documents/cwe_usage/quick_tips.html >.
Category-1418: Comprehensive Categorization: Violation of Secure Design
Principles
Category ID : 1418
Summary
Weaknesses in this category are related to violation of secure design principles.
Membership
Nature Type ID Name Page
MemberOf 1400 Comprehensive Categorization for Software Assurance
Trends
1400 2598
HasMember 250 Execution with Unnecessary Privileges 1400 599
CWE Version 4.14
CWE-604: Deprecated Entries
CWE-604: Deprecated Entries