| MemberOf |  Category - a CWE entry that contains a set of other entries that share a common characteristic. | 264 | Permissions, Privileges, and Access Controls |
| HasMember |  Variant - a weakness that is described at a very low level of detail, typically limited to a specific language or technology. More specific than a Base weakness. | 243 | Creation of chroot Jail Without Changing Working Directory |
| HasMember |  Class - a weakness that is described in a very abstract fashion, typically independent of any specific language or technology. More general than a Base weakness. | 250 | Execution with Unnecessary Privileges |
| HasMember |  Base - a weakness that is described in an abstract fashion, but with sufficient details to infer specific methods for detection and prevention. More general than a Variant weakness, but more specific than a Class weakness. | 266 | Incorrect Privilege Assignment |
| HasMember | Base - a weakness that is described in an abstract fashion, but with sufficient details to infer specific methods for detection and prevention. More general than a Variant weakness, but more specific than a Class weakness. | 267 | Privilege Defined With Unsafe Actions |
| HasMember | Base - a weakness that is described in an abstract fashion, but with sufficient details to infer specific methods for detection and prevention. More general than a Variant weakness, but more specific than a Class weakness. | 268 | Privilege Chaining |
| HasMember | Class - a weakness that is described in a very abstract fashion, typically independent of any specific language or technology. More general than a Base weakness. | 269 | Improper Privilege Management |
| HasMember | Class - a weakness that is described in a very abstract fashion, typically independent of any specific language or technology. More general than a Base weakness. | 271 | Privilege Dropping / Lowering Errors |
| HasMember | Base - a weakness that is described in an abstract fashion, but with sufficient details to infer specific methods for detection and prevention. More general than a Variant weakness, but more specific than a Class weakness. | 274 | Improper Handling of Insufficient Privileges |
| HasMember | Base - a weakness that is described in an abstract fashion, but with sufficient details to infer specific methods for detection and prevention. More general than a Variant weakness, but more specific than a Class weakness. | 501 | Trust Boundary Violation |
| HasMember | Variant - a weakness that is described at a very low level of detail, typically limited to a specific language or technology. More specific than a Base weakness. | 580 | clone() Method Without super.clone() |
| HasMember | Class - a weakness that is described in a very abstract fashion, typically independent of any specific language or technology. More general than a Base weakness. | 610 | Externally Controlled Reference to a Resource in Another Sphere |
| HasMember | Base - a weakness that is described in an abstract fashion, but with sufficient details to infer specific methods for detection and prevention. More general than a Variant weakness, but more specific than a Class weakness. | 648 | Incorrect Use of Privileged APIs |
| HasMember | Variant - a weakness that is described at a very low level of detail, typically limited to a specific language or technology. More specific than a Base weakness. | 766 | Critical Data Element Declared Public |
| HasMember | Variant - a weakness that is described at a very low level of detail, typically limited to a specific language or technology. More specific than a Base weakness. | 767 | Access to Critical Private Variable via Public Method |
Summary
Content History
