CWE - VIEW GRAPH: CWE-678: Composites (1.6)

Home > CWE List > VIEW GRAPH: CWE-678: Composites (1.6)

CWE List
Full Dictionary View
Development View
Research View
Reports

About
Sources
Process
Documents

Community
Related Activities
Discussion List
Research
CWE/SANS Top 25
CWSS

News
Calendar
Free Newsletter

Compatibility
Program
Requirements
Declarations
Make a Declaration

Contact Us
Search the Site

CWE-678: Composites

Composites

Definition in a New Window

View ID: 678 (View: Graph)

Status: Draft

View Data

View Objective

This view (graph) displays only composite weaknesses.

View Filter: .//@Compound_Element_Structure='Composite'

View Metrics

	CWEs in this view		Total CWEs
Total	9	out of	791
Views	0	out of	22
Categories	0	out of	106
Weaknesses	0	out of	651
Compound_Elements	9	out of	12

Content History

Modifications
Modification Date	Modifier	Organization	Source
2008-09-08	CWE Content Team	MITRE	Internal
2008-09-08	updated Description, View Filter, View Structure

Expand All | Collapse All

678 - Composites

Compound Element: CompositeBuffer Copy without Checking Size of Input ('Classic Buffer Overflow') - (120)Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') - (120)

Weakness ClassFailure to Fulfill API Contract ('API Abuse') - (227)Failure to Fulfill API Contract ('API Abuse') - (227)

Weakness BaseUse of Inherently Dangerous Function - (242)Use of Inherently Dangerous Function - (242)

Compound Element: CompositeTrusting Self-reported IP Address - (291)Trusting Self-reported IP Address - (291)

Weakness BaseModification of Assumed-Immutable Data (MAID) - (471)Modification of Assumed-Immutable Data (MAID) - (471)

Weakness BaseUse of Less Trusted Source - (348)Use of Less Trusted Source - (348)

Compound Element: CompositeCross-Site Request Forgery (CSRF) - (352)Cross-Site Request Forgery (CSRF) - (352)

Weakness ClassExternal Control of Critical State Data - (642)External Control of Critical State Data - (642)

Weakness BaseInsufficient Session Expiration - (613)Insufficient Session Expiration - (613)

Weakness BaseOrigin Validation Error - (346)Origin Validation Error - (346)

Weakness BaseUnintended Proxy/Intermediary - (441)Unintended Proxy/Intermediary - (441)

Compound Element: CompositeSession Fixation - (384)Session Fixation - (384)

Weakness BaseExternal Control of Assumed-Immutable Web Parameter - (472)External Control of Assumed-Immutable Web Parameter - (472)

Weakness BaseOrigin Validation Error - (346)Origin Validation Error - (346)

Weakness BaseUnintended Proxy/Intermediary - (441)Unintended Proxy/Intermediary - (441)

Compound Element: CompositeUntrusted Search Path - (426)Untrusted Search Path - (426)

Weakness ClassContainment Errors (Container Errors) - (216)Containment Errors (Container Errors) - (216)

Weakness BaseModification of Assumed-Immutable Data (MAID) - (471)Modification of Assumed-Immutable Data (MAID) - (471)

CategoryPermission Issues - (275)Permission Issues - (275)

Compound Element: CompositeUnrestricted File Upload - (434)Unrestricted File Upload - (434)

Weakness BaseInsufficient Type Distinction - (351)Insufficient Type Distinction - (351)

Weakness BaseInterpretation Conflict - (436)Interpretation Conflict - (436)

Compound Element: CompositeUNIX Symbolic Link (Symlink) Following - (61)UNIX Symbolic Link (Symlink) Following - (61)

Weakness ClassContainment Errors (Container Errors) - (216)Containment Errors (Container Errors) - (216)

CategoryPermission Issues - (275)Permission Issues - (275)

Weakness ClassPredictability Problems - (340)Predictability Problems - (340)

Weakness ClassRace Condition - (362)Race Condition - (362)

Weakness BaseSymbolic Name not Mapping to Correct Object - (386)Symbolic Name not Mapping to Correct Object - (386)

Compound Element: CompositePermission Race Condition During Resource Copy - (689)Permission Race Condition During Resource Copy - (689)

Weakness ClassIncorrect Permission Assignment for Critical Resource - (732)Incorrect Permission Assignment for Critical Resource - (732)

Weakness ClassRace Condition - (362)Race Condition - (362)

Compound Element: CompositeImproper Control of Filename for Include/Require Statement in PHP Program ('PHP File Inclusion') - (98)Improper Control of Filename for Include/Require Statement in PHP Program ('PHP File Inclusion') - (98)

Weakness ClassContainment Errors (Container Errors) - (216)Containment Errors (Container Errors) - (216)

Weakness BaseDirect Request ('Forced Browsing') - (425)Direct Request ('Forced Browsing') - (425)

Weakness BaseMissing Initialization - (456)Missing Initialization - (456)

Weakness VariantPHP External Variable Modification - (473)PHP External Variable Modification - (473)

Page Last Updated: October 29, 2009


	CWE is a Software Assurance strategic initiative sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security. This Web site is hosted by The MITRE Corporation. Copyright 2009, The MITRE Corporation. CWE and the CWE logo are trademarks of The MITRE Corporation. Contact cwe@mitre.org for more information.	Privacy policy Terms of use Contact us