Software security is not security software. Here we're concerned with topics like authentication, access control, confidentiality, cryptography, and privilege management.
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | V | 700 | Seven Pernicious Kingdoms |
| HasMember | Allowed | B | 256 | Plaintext Storage of a Password |
| HasMember | Allowed | V | 258 | Empty Password in Configuration File |
| HasMember | Allowed | V | 259 | Use of Hard-coded Password |
| HasMember | Allowed | B | 260 | Password in Configuration File |
| HasMember | Allowed | B | 261 | Weak Encoding for Password |
| HasMember | Allowed | B | 272 | Least Privilege Violation |
| HasMember | Discouraged | P | 284 | Improper Access Control |
| HasMember | Discouraged | C | 285 | Improper Authorization |
| HasMember | Discouraged | C | 330 | Use of Insufficiently Random Values |
| HasMember | Allowed | B | 359 | Exposure of Private Personal Information to an Unauthorized Actor |
| HasMember | Allowed | B | 798 | Use of Hard-coded Credentials |
This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
Consider mapping to weaknesses that are members of this Category.
| Taxonomy Name | Entry ID | Fit | Entry Name |
|---|---|---|---|
| 7 Pernicious Kingdoms | N/A | N/A | Security Features |