CWE-1032: CWE CATEGORY: OWASP Top Ten 2017 Category A6 - Security Misconfiguration

ClassStable

Weaknesses in this category are related to the A6 category in the OWASP Top Ten 2017.

View on MITRE

Back to CWE Lookup

Technical Details

Structure: Simple
Vulnerability Mapping: PROHIBITED

Applicable To

Languages

Platforms

Source-backed guidance

Additional facts reviewed against primary or authoritative security sources.

Use the CWE-1032 category to scope related security reviews

MITRE defines CWE-1032 as a category that links 3 CWE members, including CWE-16, CWE-209, and CWE-548. Use the grouping to scope related review work, then follow the linked member entries for weakness-specific implementation and verification guidance.

CWE-1032: CWE CATEGORY: OWASP Top Ten 2017 Category A6 - Security Misconfiguration — MITRE CWE

Frequently Asked Questions

What is CWE-1032: CWE CATEGORY: OWASP Top Ten 2017 Category A6 - Security Misconfiguration?+

CWE-1032: CWE CATEGORY: OWASP Top Ten 2017 Category A6 - Security Misconfiguration is a Common Weakness Enumeration (CWE) entry maintained by MITRE. Weaknesses in this category are related to the A6 category in the OWASP Top Ten 2017.

What is the difference between a CWE and a CVE?+

A CWE (Common Weakness Enumeration) like CWE-1032 describes a category of software weakness — the underlying flaw type. A CVE (Common Vulnerabilities and Exposures) identifies a specific, real-world vulnerability in a particular product. In short, a CWE is the kind of mistake, and a CVE is an instance of that mistake being found in software.