CWE - CWE-715: OWASP Top Ten 2007 Category A4 - Insecure Direct Object Reference (2.4)

OWASP Top Ten 2007 Category A4 - Insecure Direct Object Reference

Category ID: 715 (Category)

Status: Incomplete

Description

Description Summary

Weaknesses in this category are related to the A4 category in the OWASP Top Ten 2007.

Relationships

Nature	Type	ID	Name	View(s) this relationship pertains to
ParentOf	Weakness Class	22	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')	Weaknesses in OWASP Top Ten (2007) (primary)629
ParentOf	Weakness Base	472	External Control of Assumed-Immutable Web Parameter	Weaknesses in OWASP Top Ten (2007) (primary)629
ParentOf	Weakness Base	639	Authorization Bypass Through User-Controlled Key	Weaknesses in OWASP Top Ten (2007) (primary)629
MemberOf	View	629	Weaknesses in OWASP Top Ten (2007)	Weaknesses in OWASP Top Ten (2007) (primary)629

Related Attack Patterns

CAPEC-ID	Attack Pattern Name	(CAPEC Version: 1.7.1)
23	File System Function Injection, Content Based
76	Manipulating Input to File System Calls

References

OWASP. "Top 10 2007-Insecure Direct Object Reference". 2007. <http://www.owasp.org/index.php/Top_10_2007-A4>.

Content History

Submissions
Submission Date	Submitter	Organization	Source
2008-09-09		MITRE	Internal CWE Team
2008-09-09
Modifications
Modification Date	Modifier	Organization	Source
2009-05-27	CWE Content Team	MITRE	Internal
2009-05-27	updated Relationships
2009-07-27	CWE Content Team	MITRE	Internal
2009-07-27	updated Related_Attack_Patterns


	CWE is co-sponsored by the office of Cybersecurity and Communications at the U.S. Department of Homeland Security. This Web site is sponsored and managed by The MITRE Corporation to enable stakeholder collaboration. Copyright © 2006-2013, The MITRE Corporation. CWE, CWSS, CWRAF, and the CWE logo are trademarks of The MITRE Corporation. Contact cwe@mitre.org for more information.	Privacy policy Terms of use Contact us

Common Weakness Enumeration