12. CWE-862 : Missing Authorization
13. CWE-807 : Reliance on Untrusted Inputs in a Security Decision
14. CWE-863 : Incorrect Authorization
15. CWE-327 : Use of a Broken or Risky Cryptographic Algorithm