Category-355: 用户界面安全问题

ID: 355
Status: Draft

Summary

Weaknesses in this category are related to or introduced in the User Interface (UI).

Membership

ID	NAME
CWE-317	在GUI中的明文存储
CWE-356	产品UI接口未警示用户不安全动作
CWE-357	对危险操作的UI警示不充分
CWE-446	安全特性的UI矛盾
CWE-450	UI输入的多重解释
CWE-451	关键信息的UI错误表达
CWE-549	口令域未进行输入隐藏

Taxonomy Mappings

Mapped Taxonomy Name	Node ID	Fit	Mapped Node Name
PLOVER			(UI) User Interface Errors

Notes

Research Gap

User interface errors that are relevant to security have not been studied at a high level.

文章来源于互联网:scap中文网

相关推荐: Category-840: 业务逻辑错误

Category-840: 业务逻辑错误 ID: 840 Status: Incomplete Summary Weaknesses in this category identify some of the underlying problems that …