Explore weaknesses associated with the A04 classification titled "Insecure Design" in OWASP Top Ten 2021 within CWE-1348.

CWE-1344: Hierarchical Connections in Graph with OWASP Top Ten

CWE-73: Secure Code Review

CWE-183: Denylist

CWE-209: Information Exposure Through an Error Message

CWE-213: SFP Secondary Cluster: Exposed Data

CWE-235: SFP Secondary Cluster - Incorrect Input Handling

CWE-256: Passwords in Memory to Plaintext Storage

CWE-257: Storing Passwords In a Recoverable Format

CWE-266: Improper Privilege Management

CWE-269: SFP Primary Cluster - Privilege

CWE-280: Separation of Privilege Implementation Vulnerability

CWE-311: Failure to Encrypt Data

CWE-312: Insecure Cryptographic Storage

CWE-313: SFP Secondary Cluster - Exposed Data

CWE-316: SFP Secondary Cluster - Exposed Data

CWE-419: SFP Secondary Cluster Channel Attack

CWE-430: Inconsistent Type Identification in Architecture and Design

CWE-434: Unrestricted File Upload

CWE-444: SFP Secondary Cluster - Tainted Input to Command

CWE-451: Plan Input Data Validation and Output Encoding Strategy

CWE-472: Insecure Direct Object Reference

CWE-501: 7PK - Encapsulation

CWE-522: Insufficiently Protected Credentials

CWE-525: Insecure Data Cache Storage

CWE-539: Information Exposure Through Persistent Cookies

CWE-579: Session Fixation Vulnerability

CWE-598: Information Exposure Through Query Strings in GET Request

CWE-602: Client-Side Enforcement of Server-Side Security

CWE-642: Insufficient User State Management

CWE-646: SFP Secondary Cluster - Tainted Input to Command

CWE-650: SFP Secondary Cluster - Insecure Resource Access

CWE-653: Violation of Secure Design Principles

CWE-656: Content History and Vulnerability Mapping

CWE-657: Rephrasing Text to Avoid Plagiarism

CWE-799: Inadequate Safeguards Against Automation

CWE-807: Design Weaknesses in Security Strategies

CWE-840: Business Logic Vulnerabilities

CWE-841: Weakness On the Cusp

CWE-927: Insecure Communication Between Components

CWE-1021: Tapjacking Technique in Mobile Applications

CWE-1173: Insecure Design with Improper Input Validation

Discover vulnerabilities related to Insecure Design in CWE-1348. Learn about weaknesses such as external control of file names, permissive list of allowed inputs, error message exposure, and more.

CWE-1348 Weaknesses in OWASP Top Ten 2021

The weaknesses found within this category are associated with the A04 classification titled "Insecure Design" in the OWASP Top Ten for the year 2021.

CWE-1348: OWASP Top Ten 2021 Insecure Design Weaknesses

CWE-1348: OWASP Top Ten 2021 Insecure Design Weaknesses

Summary

Is your System Free of Underlying Vulnerabilities?
Find Out Now

CWE-1348: OWASP Top Ten 2021 Insecure Design Weaknesses

Summary

Is your System Free of Underlying Vulnerabilities? Find Out Now

Is your System Free of Underlying Vulnerabilities?
Find Out Now