This category identifies Software Fault Patterns (SFPs) within the Architecture cluster.
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | V | 888 | Software Fault Pattern (SFP) Clusters |
| HasMember | Allowed | B | 348 | Use of Less Trusted Source |
| HasMember | Allowed | B | 359 | Exposure of Private Personal Information to an Unauthorized Actor |
| HasMember | Allowed-with-Review | C | 602 | Client-Side Enforcement of Server-Side Security |
| HasMember | Allowed-with-Review | C | 637 | Unnecessary Complexity in Protection Mechanism (Not Using 'Economy of Mechanism') |
| HasMember | Allowed | B | 649 | Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking |
| HasMember | Allowed | B | 654 | Reliance on a Single Factor in a Security Decision |
| HasMember | Allowed-with-Review | C | 656 | Reliance on Security Through Obscurity |
| HasMember | Discouraged | C | 657 | Violation of Secure Design Principles |
| HasMember | Allowed-with-Review | C | 671 | Lack of Administrator Control over Security |
| HasMember | Discouraged | P | 693 | Protection Mechanism Failure |
| HasMember | Allowed | B | 749 | Exposed Dangerous Method or Function |
This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
See member weaknesses of this category.
| Taxonomy Name | Entry ID | Fit | Entry Name |
|---|