recorded together · Misconfiguration and Insecure Design

What Misconfiguration and Insecure Design is recorded together with

18 classes · 2 more often than chance

Misconfiguration and Insecure Design is recorded in the same CVE as 2 other classes more often than chance would give, most of all Authentication (1.3×), Access Control (1.2×).

Each hub is another class and each strip a pair of weaknesses, one from each class, as long as the CVEs that carry both. A hub is larger the further the pairing stands above chance. Open a class or a pair to see the CVEs.

A CVE counts when its record names a weakness from each class, neither being the other's parent. It says the two kinds of flaw are recorded together in one vulnerability more or less often than chance: not that one causes the other, and it follows how the people who file CVEs choose CWEs.

Connect AI