This category identifies Software Fault Patterns (SFPs) within the Channel Attack cluster.
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | V | 888 | Software Fault Pattern (SFP) Clusters |
| HasMember | Allowed | B | 290 | Authentication Bypass by Spoofing |
| HasMember | Allowed | B | 294 | Authentication Bypass by Capture-replay |
| HasMember | Discouraged | C | 300 | Channel Accessible by Non-Endpoint |
| HasMember | Allowed | B | 301 | Reflection Attack in an Authentication Protocol |
| HasMember | Allowed | B | 419 | Unprotected Primary Channel |
| HasMember | Allowed | B | 420 | Unprotected Alternate Channel |
| HasMember | Allowed | B | 421 | Race Condition During Access to Alternate Channel |
| HasMember | Allowed-with-Review | C | 441 | Unintended Proxy or Intermediary ('Confused Deputy') |
This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
See member weaknesses of this category.
| Taxonomy Name | Entry ID | Fit | Entry Name |
|---|