CWE-340 可预测问题

Predictability Problems

结构: Simple

Abstraction: Class

状态: Incomplete

被利用可能性: unkown

基本描述

Weaknesses in this category are related to schemes that generate numbers or identifiers that are more predictable than required by the application.

相关缺陷

• cwe_Nature: ChildOf cwe_CWE_ID: 330 cwe_View_ID: 1000 cwe_Ordinal: Primary

• cwe_Nature: ChildOf cwe_CWE_ID: 330 cwe_View_ID: 699 cwe_Ordinal: Primary

常见的影响

范围	影响	注释
Other	Varies by Context

分类映射

映射的分类名	ImNode ID	Fit	Mapped Node Name
PLOVER			Predictability problems
WASC	11		Brute Force

引用

• REF-44 24 Deadly Sins of Software Security

文章来源于互联网:scap中文网