2391
Nature Type ID Name Page
HasMember 22 Improper Limitation of a Pathname to a Restricted
Directory ('Path Traversal')
928 33
HasMember 99 Improper Control of Resource Identifiers ('Resource
Injection')
928 243
HasMember 639 Authorization Bypass Through User-Controlled Key 928 1406
HasMember 706 Use of Incorrectly-Resolved Name or Reference 928 1544
References
[REF-931]OWASP. "Top 10 2013-A4-Insecure Direct Object References". < https://
www.owasp.org/index.php/Top_10_2013-A4-Insecure_Direct_Object_References >.
Category-933: OWASP Top Ten 2013 Category A5 - Security Misconfiguration
Category ID : 933
Summary
Weaknesses in this category are related to the A5 category in the OWASP Top Ten 2013.
Membership
Nature Type ID Name Page
MemberOf 928 Weaknesses in OWASP Top Ten (2013) 928 2574
HasMember 2 7PK - Environment 928 2308
HasMember 16 Configuration 928 2309
HasMember 209 Generation of Error Message Containing Sensitive
Information
928 533
HasMember 215 Insertion of Sensitive Information Into Debugging Code 928 551
HasMember 548 Exposure of Information Through Directory Listing 928 1261
References
[REF-932]OWASP. "Top 10 2013-A5-Security Misconfiguration". < https://www.owasp.org/
index.php/Top_10_2013-A5-Security_Misconfiguration >.
Category-934: OWASP Top Ten 2013 Category A6 - Sensitive Data Exposure
Category ID : 934
Summary
Weaknesses in this category are related to the A6 category in the OWASP Top Ten 2013.
Membership
Nature Type ID Name Page
MemberOf 928 Weaknesses in OWASP Top Ten (2013) 928 2574
HasMember 311 Missing Encryption of Sensitive Data 928 757
HasMember 312 Cleartext Storage of Sensitive Information 928 764
HasMember 319 Cleartext Transmission of Sensitive Information 928 779
HasMember 320 Key Management Errors 928 2319
HasMember 325 Missing Cryptographic Step 928 794
HasMember 326 Inadequate Encryption Strength 928 796
HasMember 327 Use of a Broken or Risky Cryptographic Algorithm 928 799
CWE Version 4.14
CWE-935: OWASP Top Ten 2013 Category A7 - Missing Function Level Access Control
CWE-935: OWASP Top Ten 2013 Category
A7 - Missing Function Level Access Control 2392
Nature Type ID Name Page
HasMember 328 Use of Weak Hash 928 806
References
[REF-933]OWASP. "Top 10 2013-A6-Sensitive Data Exposure". < https://www.owasp.org/
index.php/Top_10_2013-A6-Sensitive_Data_Exposure >.
Category-935: OWASP Top Ten 2013 Category A7 - Missing Function Level
Access Control
Category ID : 935
Summary
Weaknesses in this category are related to the A7 category in the OWASP Top Ten 2013.
Membership
Nature Type ID Name Page
MemberOf 928 Weaknesses in OWASP Top Ten (2013) 928 2574
HasMember 285 Improper Authorization 928 684
References
[REF-934]OWASP. "Top 10 2013-A7-Missing Function Level Access Control". < https://
www.owasp.org/index.php/Top_10_2013-A7-Missing_Function_Level_Access_Control >.
Category-936: OWASP Top Ten 2013 Category A8 - Cross-Site Request
Forgery (CSRF)
Category ID : 936
Summary
Weaknesses in this category are related to the A8 category in the OWASP Top Ten 2013.
Membership
Nature Type ID Name Page
MemberOf 928 Weaknesses in OWASP Top Ten (2013) 928 2574
HasMember 352 Cross-Site Request Forgery (CSRF) 928 868
References
[REF-935]OWASP. "Top 10 2013-A8-Cross-Site Request Forgery (CSRF)". < https://
www.owasp.org/index.php/Top_10_2013-A8-Cross-Site_Request_Forgery_%28CSRF%29 >.
Category-937: OWASP Top Ten 2013 Category A9 - Using Components with
Known Vulnerabilities
Category ID : 937
Summary
Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Membership
CWE Version 4.14
CWE-938: OWASP Top Ten 2013 Category A10 - Unvalidated Redirects and Forwards
CWE-938: OWASP Top Ten 2013 Category
A10 - Unvalidated Redirects and Forwards