This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Cornucopia - Ecommerce Website - CR 6"
From OWASP
(Created page with "{{DISPLAYTITLE:<span style="padding:2px 5px 0px 5px;color:white;background:#a395ca;">Cornucopia - Ecommerce Website - CR 6</span>}} File:Cornucopia_-_Ecommerce_Website_CR_6....") |
|||
| Line 66: | Line 66: | ||
</tr> | </tr> | ||
</table> | </table> | ||
| − | |||
<div style="padding:5px;background:LightGray;color:White;font-weight:bold;">[[Cornucopia_-_Ecommerce_Website_-_CR_5|« Previous Card]] <span style="padding-left:10px;padding-right:10px;">|</span> [[Cornucopia_-_Ecommerce_Website_-_CR|Cryptography]] <span style="padding-left:10px;padding-right:10px;">|</span> [[Cornucopia_-_Ecommerce_Website_-_CR_7|Next Card »]] </div> | <div style="padding:5px;background:LightGray;color:White;font-weight:bold;">[[Cornucopia_-_Ecommerce_Website_-_CR_5|« Previous Card]] <span style="padding-left:10px;padding-right:10px;">|</span> [[Cornucopia_-_Ecommerce_Website_-_CR|Cryptography]] <span style="padding-left:10px;padding-right:10px;">|</span> [[Cornucopia_-_Ecommerce_Website_-_CR_7|Next Card »]] </div> | ||
Latest revision as of 16:27, 21 January 2016
Suit: Cryptography
Card/Value: 6
Description:
Romain can read and modify data in memory or in transit (e.g. cryptographic secrets, credentials, session identifiers, personal and commercially-sensitive data), in use or in communications within the application, or between the application and users, or between the application and external systems.
Technical Note:
NB: The key concept for this card is lack of encryption of data in transit and/or in memory.
References:
| OWASP SCP | OWASP ASVS | OWASP AppSensor | CAPEC | SAFECODE |
|---|---|---|---|---|
| 36 | 9.2 | - | 31 | 29 |
| 37 | 10.2 | 57 | ||
| 143 | 10.3 | 102 | ||
| 146 | 10.7 | 158 | ||
| 147 | 384 | |||
| 466 |
