Weaknesses in this category are related to the A2 category in the OWASP Top Ten 2017.
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | V | 1026 | Weaknesses in OWASP Top Ten (2017) |
| HasMember | Allowed | B | 256 | Plaintext Storage of a Password |
| HasMember | Discouraged | C | 287 | Improper Authentication |
| HasMember | Allowed | B | 308 | Use of Single-factor Authentication |
| HasMember | Allowed | C | 384 | Session Fixation |
| HasMember | Allowed-with-Review | C | 522 | Insufficiently Protected Credentials |
| HasMember | Allowed | B | 523 | Unprotected Transport of Credentials |
| HasMember | Allowed | B | 613 | Insufficient Session Expiration |
| HasMember | Allowed | B | 620 | Unverified Password Change |
| HasMember | Allowed-with-Review | B | 640 | Weak Password Recovery Mechanism for Forgotten Password |
This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
See member weaknesses of this category.
| Taxonomy Name | Entry ID | Fit | Entry Name |
|---|