Explore weaknesses related to the management of access control. Includes issues like weak permissions, storing passwords insecurely, and improper privilege management.

CWE-1400: Comprehensive Categorization: Relationship Research View

CWE-9: Least Privilege Violation

CWE-13: Configuration Security Vulnerability

CWE-202: SFP Secondary Cluster - State Disclosure

CWE-256: Passwords in Memory to Plaintext Storage

CWE-257: Storing Passwords In a Recoverable Format

CWE-258: Password Length Requirement Not Met

CWE-259: Hard-Coded Password

CWE-260: Passwords Not Stored Safely

CWE-261: Weak Cryptographic Algorithms

CWE-262: Vulnerability Mapping Notes and Content History

CWE-263: Password Aging With Long Expiration

CWE-266: Improper Privilege Management

CWE-267: Secure Privilege Handling

CWE-268: Privilege Separation to Prevent Access Control Vulnerabilities

CWE-269: SFP Primary Cluster - Privilege

CWE-270: Privilege Separation

CWE-271: Separation of Privilege

CWE-272: Inadequate Access Control

CWE-273: POSIX (POS)

CWE-274: Privilege Cluster Vulnerabilities

CWE-276: Insecure File Permissions

CWE-277: SFP Secondary Cluster - Insecure Resource Permissions

CWE-278: Approach for Insecure Resource Permissions with Separation of Privilege Principle

CWE-279: Insecure Resource Permissions

CWE-280: Separation of Privilege Implementation Vulnerability

CWE-281: SFP Secondary Cluster - Insecure Resource Permissions

CWE-282: SFP Secondary Cluster - Access Management

CWE-283: Inadequate Trust Zone Management

CWE-284: Access Control Issues

CWE-285: Improper Authorization

CWE-286: Abstraction

CWE-287: Authentication Issues

CWE-288: Authentication Bypass Using Alternate Channel

CWE-289: Input Validation and Data Sanitization Guidelines

CWE-290: Applicable Mapping of Vulnerabilities

CWE-291: Comprehensive Categorization - Access Control

CWE-293: SFP Secondary Cluster - Faulty Endpoint Authentication

CWE-294: Design Message Authentication Mechanism

CWE-295: Identification and Authentication Failures

CWE-296: Chain of Trust Issues in Certificate Validation

CWE-297: Improper Validation of Host-specific Certificate Data

CWE-298: Expired Certificate

CWE-299: Failure to Check for Certificate Revocation

CWE-300: Channel Accessible by Non-Endpoint ('Man-in-the-Middle')

CWE-301: Distinct Key Usage in Architecture and Design

CWE-302: Authentication Bypass by Assumed Immutable Data

CWE-303: SFP Secondary Cluster - Authentication Bypass

CWE-304: OWASP Top Ten 2004 Category A3 - Broken Authentication and Session Management

CWE-305: SFP Secondary Cluster Authentication Bypass

CWE-306: Missing Authentication for Critical Function

CWE-307: Improper Restriction of Excessive Authentication Attempts

CWE-308: Multiple Independent Authentication Schemes Utilized

CWE-309: Use of Password Reuse Risk

CWE-321: Insecure Cryptographic Key Storage

CWE-322: Weak Cryptography Implementation

CWE-350: SFP Secondary Cluster - Faulty Endpoint Authentication

CWE-370: SFP Secondary Cluster - Race Condition Window

CWE-384: Session Fixation

CWE-419: SFP Secondary Cluster Channel Attack

CWE-420: SFP Secondary Cluster Channel Attack

CWE-421: SFP Secondary Cluster: Channel Attack

CWE-422: SFP Secondary Cluster - Missing Endpoint Authentication

CWE-425: Forced Browsing

CWE-441: SFP Secondary Cluster - Channel Attack

CWE-520: Insecure Configuration Management Vulnerability

CWE-521: Weak Password Requirements

CWE-522: Insufficiently Protected Credentials

CWE-523: Weak Password Requirements

CWE-549: SFP Secondary Cluster: Feature

CWE-551: Access Control Decoding Vulnerability

CWE-555: Insecure Configuration Management

CWE-556: Access Control Bypass Through User-Controlled SQL Primary Key

CWE-566: Access Control Bypass Through User-Controlled SQL Primary Key

CWE-593: Utilization of Advanced Cryptography Frameworks for Secure SSL Implementation

CWE-599: SFP Secondary Cluster - Digital Certificate

CWE-601: ICS Operations (& Maintenance): Emerging Energy Technologies

CWE-603: SFP Secondary Cluster - Authentication Bypass

CWE-611: Improper Restriction of XML External Entity Reference ('XXE')

CWE-612: SFP Secondary Cluster Exposed Data

CWE-613: Insufficient Session Expiration

CWE-620: Weak Password Recovery Mechanism for Forgotten Password

CWE-623: Insecure Control of Generation of Code

CWE-639: Insecure Direct Object Reference

CWE-640: Weak Password Recovery Mechanism

CWE-645: SFP Secondary Cluster - Insecure Authentication Policy

CWE-647: Canonical Path Validation Error

CWE-648: Improper Use of Privileged APIs

CWE-708: Improper Privilege Management

CWE-732: Insecure Permission Assignment for Critical Resource

CWE-798: Vulnerability in Authentication Mechanisms

CWE-804: Access Control: Weaknesses On the Cusp

CWE-836: Comprehensive Categorization - Access Control

CWE-842: Comprehensive Categorization: Access Control

CWE-862: Improper Authorization

CWE-863: Insecure Direct Object References in Authentication Data

CWE-918: Weaknesses in Cross-Site Port Attacks

CWE-921: Comprehensive Categorization: Access Control

CWE-923: Comprehensive Categorization of Access Control

CWE-925: Comprehensive Categorization - Access Control

Discover weaknesses related to access control management, such as weak password storage and privilege misconfigurations. Learn more about securing your systems.

Explore Improper Access Control Vulnerabilities (CWE-1396)

The vulnerabilities within this specific category are associated with the management of access control.

CWE-1396: Improper Access Control

CWE-1396: Improper Access Control

Summary

Is your System Free of Underlying Vulnerabilities?
Find Out Now

CWE-1396: Improper Access Control

Summary

Is your System Free of Underlying Vulnerabilities? Find Out Now

Is your System Free of Underlying Vulnerabilities?
Find Out Now