Cryptographic Failures
Failures related to cryptography which often lead to sensitive data exposure. This was previously known as Sensitive Data Exposure.
Resumen
Shifting up one position to #2, previously known as Sensitive Data Exposure. The focus is on failures related to cryptography which often leads to sensitive data exposure or system compromise.
Cómo los Atacantes Explotan Esto
Entender los patrones de ataque te ayuda a construir mejores defensas. Estas son las técnicas que los equipos de seguridad vigilan.
Data exposure in transit
Sensitive data transmitted over unencrypted connections can be intercepted. This includes passwords, session tokens, and personal information.
Weak cryptographic storage
Data stored with weak or broken encryption (MD5, SHA1, DES) can be recovered by attackers who gain database access.
Cómo Prevenir
- Classify data processed, stored, or transmitted by an application
- Don't store sensitive data unnecessarily
- Encrypt all sensitive data at rest
- Use up-to-date and strong standard algorithms and protocols
- Encrypt all data in transit with secure protocols such as TLS
- Disable caching for responses containing sensitive data
- Store passwords using strong salted hashing functions
CWEs con Detección Shoulder (8)
Estos CWEs tienen reglas de detección Shoulder. Haz clic para ver vulnerabilidades específicas y correcciones.
Otros CWEs Mapeados (22)
Estos CWEs están mapeados a esta categoría pero aún no tienen reglas Shoulder.