Category-1012: 交叉切割

admin 2021年11月10日02:53:13评论57 views字数 791阅读2分38秒阅读模式

Category-1012: 交叉切割

ID: 1012
Status: Draft

Summary

Weaknesses in this category are related to the design and architecture of multiple security tactics and how they affect a system. For example, information exposure can impact the Limit Access and Limit Exposure security tactics. The weaknesses in this category could lead to a degradation of the quality of many capabilities if they are not addressed when designing or implementing a secure architecture.

Membership

ID NAME
CWE-208 通过时间差异性导致的信息暴露
CWE-392 错误条件报告缺失
CWE-460 抛出异常的清理不恰当
CWE-544 标准化错误处理机制缺失
CWE-602 服务端安全的客户端实施
CWE-703 对异常条件检查或处理不恰当
CWE-754 对因果或异常条件的不恰当检查
CWE-784 在安全决策中依赖未经验证和完整性检查的Cookie
CWE-807 在安全决策中依赖未经信任的输入

References

REF-9 A Catalog of Security Architecture Weaknesses.
REF-10 Understanding Software Vulnerabilities Related to Architectural Security Tactics: An Empirical Investigation of Chromium, PHP and Thunderbird.

文章来源于互联网:scap中文网

  • 左青龙
  • 微信扫一扫
  • weinxin
  • 右白虎
  • 微信扫一扫
  • weinxin
admin
  • 本文由 发表于 2021年11月10日02:53:13
  • 转载请保留本文链接(CN-SEC中文网:感谢原作者辛苦付出):
                   Category-1012: 交叉切割http://cn-sec.com/archives/613555.html

发表评论

匿名网友 填写信息