CWE-1029 Categorie Detail

CWE-1029

OWASP Top Ten 2017 Category A3 - Sensitive Data Exposure
Incomplete
2018-03-29 +00:00
2023-06-29 +00:00
CWE Mitre.org
Notifications for a CWE
Stay informed of any changes for a specific CWE.
Notifications manage

Name: OWASP Top Ten 2017 Category A3 - Sensitive Data Exposure

Weaknesses in this category are related to the A3 category in the OWASP Top Ten 2017.

CWE Members List

CWE-220: Storage of File With Sensitive Data Under FTP Root Base

CWE-295: Improper Certificate Validation Base

CWE-311: Missing Encryption of Sensitive Data Base

CWE-312: Cleartext Storage of Sensitive Information Base

CWE-319: Cleartext Transmission of Sensitive Information Base

CWE-325: Missing Cryptographic Step Base

CWE-326: Inadequate Encryption Strength Base

CWE-327: Use of a Broken or Risky Cryptographic Algorithm Base

CWE-328: Use of Weak Hash Base

CWE-359: Exposure of Private Personal Information to an Unauthorized Actor Base

CWE Informations

Vulnerability Mapping Notes

Justification : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
Comment : See member weaknesses of this category.

Submission

Name Organization Date Date release Version
CWE Content Team MITRE 2018-01-22 +00:00 2018-03-29 +00:00 3.1

Modifications

Name Organization Date Comment
CWE Content Team MITRE 2020-02-24 +00:00 updated References
CWE Content Team MITRE 2023-04-27 +00:00 updated Mapping_Notes
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes

References

REF-957

Top 10 2017
https://owasp.org/www-pdf-archive/OWASP_Top_10-2017_%28en%29.pdf.pdf