Marsの5εcur1ty備忘録

不定期的にCTF、脆弱性検証、バグバウンティレポート分析など、情報セキュリティを中心とした技術ブログを更新します。

CWE重要脆弱性一覧:Access Control

Brute Force (CWE-307)
Forced Browsing (CWE-425)
Improper Access Control - Generic (CWE-284)
Improper Authentication - Generic (CWE-287)
Information Disclosure (CWE-200)
Information Exposure Through Debug Information (CWE-215)
Information Exposure Through Directory Listing (CWE-548)
Information Exposure Through an Error Message (CWE-209)
Insecure Direct Object Reference (IDOR) (CWE-639)
Insufficient Session Expiration (CWE-613)
Key Exchange without Entity Authentication (CWE-322)
Path Traversal (CWE-22)
Privacy Violation (CWE-359)
Privilege Escalation (CAPEC-233)

Copyright Mars 2019