Category-2: 7PK-环境

admin 2021年12月4日16:23:42评论53 views字数 873阅读2分54秒阅读模式

Category-2: 7PK-环境

ID: 2
Status: Draft

Summary

This category represents one of the phyla in the Seven Pernicious Kingdoms vulnerability classification. It includes weaknesses that are typically introduced during unexpected environmental conditions. According to the authors of the Seven Pernicious Kingdoms, "This section includes everything that is outside of the source code but is still critical to the security of the product that is being created. Because the issues covered by this kingdom are not directly related to source code, we separated it from the rest of the kingdoms."

Membership

ID NAME
CWE-11 ASP.NET误配置:创建Debug模式二进制
CWE-12 ASP.NET误配置:缺少定制错误页面
CWE-13 ASP.NET误配置:配置文件中存储口令
CWE-14 编译器移除释放缓冲区的代码
CWE-5 J2EE误配置:未经加密的数据传输
CWE-6 J2EE误配置:会话ID长度不充分
CWE-7 J2EE误配置:缺少定制错误页面
CWE-8 J2EE误配置:实体Bean远程声明
CWE-9 J2EE误配置:EJB方法弱访问权限

文章来源于互联网:scap中文网

相关推荐: CWE-1110 设计文件不完整

CWE-1110 设计文件不完整 Incomplete Design Documentation 结构: Simple Abstraction: Base 状态: Incomplete 被利用可能性: unkown 基本描述 The product's des…

  • 左青龙
  • 微信扫一扫
  • weinxin
  • 右白虎
  • 微信扫一扫
  • weinxin
admin
  • 本文由 发表于 2021年12月4日16:23:42
  • 转载请保留本文链接(CN-SEC中文网:感谢原作者辛苦付出):
                   Category-2: 7PK-环境http://cn-sec.com/archives/613346.html

发表评论

匿名网友 填写信息