2475
Category ID : 1208
Summary
Weaknesses in this category can arise in multiple areas of hardware design or can apply to a wide
cross-section of components.
Membership
Nature Type ID Name Page
MemberOf 1194 Hardware Design 1194 2586
HasMember 440 Expected Behavior Violation 1194 1062
HasMember 1053 Missing Documentation for Design 1194 1888
HasMember 1059 Insufficient Technical Documentation 1194 1894
HasMember 1263 Improper Physical Access Control 1194 2085
HasMember 1277 Firmware Not Updateable 1194 2116
HasMember 1301 Insufficient or Incomplete Data Removal within
Hardware Component
1194 2170
HasMember 1329 Reliance on Component That is Not Updateable 1194 2219
HasMember 1357 Reliance on Insufficiently Trustworthy Component 1194 2254
Category-1210: Audit / Logging Errors
Category ID : 1210
Summary
Weaknesses in this category are related to audit-based components of a software system.
Frequently these deal with logging user activities in order to identify undesired access and
modifications to the system. The weaknesses in this category could lead to a degradation of the
quality of the audit capability if they are not addressed.
Membership
Nature Type ID Name Page
MemberOf 699 Software Development 699 2555
HasMember 117 Improper Output Neutralization for Logs 699 288
HasMember 222 Truncation of Security-relevant Information 699 557
HasMember 223 Omission of Security-relevant Information 699 559
HasMember 224 Obscured Security-relevant Information by Alternate
Name
699 561
HasMember 778 Insufficient Logging 699 1638
HasMember 779 Logging of Excessive Data 699 1642
Category-1211: Authentication Errors
Category ID : 1211
Summary
Weaknesses in this category are related to authentication components of a system. Frequently
these deal with the ability to verify that an entity is indeed who it claims to be. If not addressed
when designing or implementing a software system, these weaknesses could lead to a degradation
of the quality of the authentication capability.
CWE Version 4.14
CWE-1212: Authorization Errors
CWE-1212: Authorization Errors