Cryptographic Failures
Failures related to cryptography which often lead to sensitive data exposure. This includes using weak algorithms, improper key management, and missing encryption.
अवलोकन
Dropped to #4 from #2. Focuses on failures related to cryptography which often leads to sensitive data exposure or system compromise. 3.80% incidence rate across tested applications.
हमलावर इसका शोषण कैसे करते हैं
हमले के पैटर्न समझने से बेहतर सुरक्षा बनाने में मदद मिलती है। ये वे तकनीकें हैं जिन पर सुरक्षा टीमें नज़र रखती हैं।
Data exposure in transit
Sensitive data transmitted over unencrypted connections can be intercepted. This includes passwords, session tokens, and personal information.
Weak cryptographic storage
Data stored with weak or broken encryption (MD5, SHA1, DES) can be recovered by attackers who gain database access.
Hardcoded secrets
API keys, passwords, or encryption keys embedded in source code can be extracted from repositories or compiled binaries.
कैसे रोकें
- Classify data processed, stored, or transmitted by an application
- Don't store sensitive data unnecessarily
- Encrypt all sensitive data at rest using modern algorithms
- Use up-to-date and strong standard algorithms and protocols
- Encrypt all data in transit with secure protocols such as TLS 1.3
- Disable caching for responses containing sensitive data
- Store passwords using strong salted hashing functions (Argon2, bcrypt, scrypt)
Shoulder पहचान वाले CWE (9)
इन CWE में Shoulder पहचान नियम हैं। विशिष्ट भेद्यताएँ और समाधान देखने के लिए क्लिक करें।
अन्य मैप किए गए CWE (22)
ये CWE इस श्रेणी से मैप किए गए हैं लेकिन अभी तक Shoulder नियम नहीं हैं।