2393
Nature Type ID Name Page
MemberOf 928 Weaknesses in OWASP Top Ten (2013) 928 2574
MemberOf 1352 OWASP Top Ten 2021 Category A06:2021 - Vulnerable
and Outdated Components
1344 2494
Notes
Relationship
This is an unusual category. CWE does not cover the limitations of human processes and
procedures that cannot be described in terms of a specific technical weakness as resident in the
code, architecture, or configuration of the software. Since "known vulnerabilities" can arise from
any kind of weakness, it is not possible to map this OWASP category to other CWE entries, since
it would effectively require mapping this category to ALL weaknesses.
References
[REF-936]OWASP. "Top 10 2013-A9-Using Components with Known Vulnerabilities". < https://
www.owasp.org/index.php/Top_10_2013-A9-Using_Components_with_Known_Vulnerabilities >.
Category-938: OWASP Top Ten 2013 Category A10 - Unvalidated Redirects
and Forwards
Category ID : 938
Summary
Weaknesses in this category are related to the A10 category in the OWASP Top Ten 2013.
Membership
Nature Type ID Name Page
MemberOf 928 Weaknesses in OWASP Top Ten (2013) 928 2574
HasMember 601 URL Redirection to Untrusted Site ('Open Redirect') 928 1345
References
[REF-937]OWASP. "Top 10 2013-A10-Unvalidated Redirects and Forwards". < https://
www.owasp.org/index.php/Top_10_2013-A10-Unvalidated_Redirects_and_Forwards >.
Category-944: SFP Secondary Cluster: Access Management
Category ID : 944
Summary
This category identifies Software Fault Patterns (SFPs) within the Access Management cluster.
Membership
Nature Type ID Name Page
MemberOf 899 SFP Primary Cluster: Access Control 888 2386
HasMember 282 Improper Ownership Management 888 676
HasMember 283 Unverified Ownership 888 678
HasMember 284 Improper Access Control 888 680
HasMember 286 Incorrect User Management 888 691
HasMember 708 Incorrect Ownership Assignment 888 1548
CWE Version 4.14
CWE-945: SFP Secondary Cluster: Insecure Resource Access
CWE-945: SFP Secondary Cluster: Insecure Resource Access