[1] Ben Alex Acegi Security - Channel Security
[2] Standards Mapping - Common Weakness Enumeration
CWE ID 5[3] Standards Mapping - DISA Control Correlation Identifier Version 2
CCI-000068, CCI-001453, CCI-002418, CCI-002420, CCI-002421, CCI-002422, CCI-002890, CCI-003123[4] Standards Mapping - General Data Protection Regulation (GDPR)
Access Violation[5] Standards Mapping - NIST Special Publication 800-53 Revision 4
AC-17 Remote Access (P1), MA-4 Nonlocal Maintenance (P2), SC-8 Transmission Confidentiality and Integrity (P1)[6] Standards Mapping - NIST Special Publication 800-53 Revision 5
AC-17 Remote Access, MA-4 Nonlocal Maintenance, SC-8 Transmission Confidentiality and Integrity[7] Standards Mapping - OWASP Application Security Verification Standard 4.0
2.2.5 General Authenticator Requirements (L3), 2.6.3 Look-up Secret Verifier Requirements (L2 L3), 6.2.1 Algorithms (L1 L2 L3), 8.1.6 General Data Protection (L3), 8.3.1 Sensitive Private Data (L1 L2 L3), 9.1.1 Communications Security Requirements (L1 L2 L3), 9.2.2 Server Communications Security Requirements (L2 L3), 14.1.3 Build (L2 L3), 14.4.5 HTTP Security Headers Requirements (L1 L2 L3)[8] Standards Mapping - OWASP Mobile 2014
M9 Improper Session Handling[9] Standards Mapping - OWASP Mobile 2024
M8 Security Misconfiguration[10] Standards Mapping - OWASP Top 10 2004
A3 Broken Authentication and Session Management[11] Standards Mapping - OWASP Top 10 2007
A7 Broken Authentication and Session Management[12] Standards Mapping - OWASP Top 10 2010
A9 Insufficient Transport Layer Protection[13] Standards Mapping - OWASP Top 10 2013
A5 Security Misconfiguration[14] Standards Mapping - OWASP Top 10 2017
A6 Security Misconfiguration[15] Standards Mapping - OWASP Top 10 2021
A05 Security Misconfiguration[16] Standards Mapping - Payment Card Industry Data Security Standard Version 1.1
Requirement 6.5.3[17] Standards Mapping - Payment Card Industry Data Security Standard Version 1.2
Requirement 6.5.7[18] Standards Mapping - Payment Card Industry Data Security Standard Version 2.0
Requirement 6.5.8[19] Standards Mapping - Payment Card Industry Data Security Standard Version 3.0
Requirement 6.5.10[20] Standards Mapping - Payment Card Industry Data Security Standard Version 3.1
Requirement 6.5.10[21] Standards Mapping - Payment Card Industry Data Security Standard Version 3.2
Requirement 6.5.10[22] Standards Mapping - Payment Card Industry Data Security Standard Version 3.2.1
Requirement 6.5.10[23] Standards Mapping - Payment Card Industry Data Security Standard Version 4.0
Requirement 6.2.4[24] Standards Mapping - Payment Card Industry Software Security Framework 1.0
Control Objective 4.2 - Critical Asset Protection[25] Standards Mapping - Payment Card Industry Software Security Framework 1.1
Control Objective 4.2 - Critical Asset Protection[26] Standards Mapping - Payment Card Industry Software Security Framework 1.2
Control Objective 4.2 - Critical Asset Protection[27] Standards Mapping - Security Technical Implementation Guide Version 3.1
APP3405 CAT I[28] Standards Mapping - Security Technical Implementation Guide Version 3.4
APP3405 CAT I[29] Standards Mapping - Security Technical Implementation Guide Version 3.5
APP3405 CAT I[30] Standards Mapping - Security Technical Implementation Guide Version 3.6
APP3405 CAT I[31] Standards Mapping - Security Technical Implementation Guide Version 3.7
APP3405 CAT I[32] Standards Mapping - Security Technical Implementation Guide Version 3.9
APP3405 CAT I[33] Standards Mapping - Security Technical Implementation Guide Version 3.10
APP3405 CAT I[34] Standards Mapping - Security Technical Implementation Guide Version 4.2
APSC-DV-000160 CAT II, APSC-DV-000170 CAT II, APSC-DV-001940 CAT II, APSC-DV-001950 CAT II, APSC-DV-002440 CAT I, APSC-DV-002450 CAT II, APSC-DV-002460 CAT II, APSC-DV-002470 CAT II[35] Standards Mapping - Security Technical Implementation Guide Version 4.3
APSC-DV-000160 CAT II, APSC-DV-000170 CAT II, APSC-DV-001940 CAT II, APSC-DV-001950 CAT II, APSC-DV-002440 CAT I, APSC-DV-002450 CAT II, APSC-DV-002460 CAT II, APSC-DV-002470 CAT II[36] Standards Mapping - Security Technical Implementation Guide Version 4.4
APSC-DV-000160 CAT II, APSC-DV-000170 CAT II, APSC-DV-001940 CAT II, APSC-DV-001950 CAT II, APSC-DV-002440 CAT I, APSC-DV-002450 CAT II, APSC-DV-002460 CAT II, APSC-DV-002470 CAT II[37] Standards Mapping - Security Technical Implementation Guide Version 4.5
APSC-DV-000160 CAT II, APSC-DV-000170 CAT II, APSC-DV-001940 CAT II, APSC-DV-001950 CAT II, APSC-DV-002440 CAT I, APSC-DV-002450 CAT II, APSC-DV-002460 CAT II, APSC-DV-002470 CAT II[38] Standards Mapping - Security Technical Implementation Guide Version 4.6
APSC-DV-000160 CAT II, APSC-DV-000170 CAT II, APSC-DV-001940 CAT II, APSC-DV-001950 CAT II, APSC-DV-002440 CAT I, APSC-DV-002450 CAT II, APSC-DV-002460 CAT II, APSC-DV-002470 CAT II[39] Standards Mapping - Security Technical Implementation Guide Version 4.7
APSC-DV-000160 CAT II, APSC-DV-000170 CAT II, APSC-DV-001940 CAT II, APSC-DV-001950 CAT II, APSC-DV-002440 CAT I, APSC-DV-002450 CAT II, APSC-DV-002460 CAT II, APSC-DV-002470 CAT II[40] Standards Mapping - Security Technical Implementation Guide Version 4.8
APSC-DV-000160 CAT II, APSC-DV-000170 CAT II, APSC-DV-001940 CAT II, APSC-DV-001950 CAT II, APSC-DV-002440 CAT I, APSC-DV-002450 CAT II, APSC-DV-002460 CAT II, APSC-DV-002470 CAT II[41] Standards Mapping - Security Technical Implementation Guide Version 4.9
APSC-DV-000160 CAT II, APSC-DV-000170 CAT II, APSC-DV-001940 CAT II, APSC-DV-001950 CAT II, APSC-DV-002440 CAT I, APSC-DV-002450 CAT II, APSC-DV-002460 CAT II, APSC-DV-002470 CAT II[42] Standards Mapping - Security Technical Implementation Guide Version 4.10
APSC-DV-000160 CAT II, APSC-DV-000170 CAT II, APSC-DV-001940 CAT II, APSC-DV-001950 CAT II, APSC-DV-002440 CAT I, APSC-DV-002450 CAT II, APSC-DV-002460 CAT II, APSC-DV-002470 CAT II[43] Standards Mapping - Security Technical Implementation Guide Version 4.11
APSC-DV-000160 CAT II, APSC-DV-000170 CAT II, APSC-DV-001940 CAT II, APSC-DV-001950 CAT II, APSC-DV-002440 CAT I, APSC-DV-002450 CAT II, APSC-DV-002460 CAT II, APSC-DV-002470 CAT II[44] Standards Mapping - Security Technical Implementation Guide Version 4.1
APSC-DV-000160 CAT II, APSC-DV-000170 CAT II, APSC-DV-001940 CAT II, APSC-DV-001950 CAT II, APSC-DV-002440 CAT I, APSC-DV-002450 CAT II, APSC-DV-002460 CAT II, APSC-DV-002470 CAT II[45] Standards Mapping - Security Technical Implementation Guide Version 5.1
APSC-DV-000160 CAT II, APSC-DV-000170 CAT II, APSC-DV-001940 CAT II, APSC-DV-001950 CAT II, APSC-DV-002440 CAT I, APSC-DV-002450 CAT II, APSC-DV-002460 CAT II, APSC-DV-002470 CAT II[46] Standards Mapping - Security Technical Implementation Guide Version 5.2
APSC-DV-000160 CAT II, APSC-DV-000170 CAT II, APSC-DV-001940 CAT II, APSC-DV-001950 CAT II, APSC-DV-002440 CAT I, APSC-DV-002450 CAT II, APSC-DV-002460 CAT II, APSC-DV-002470 CAT II[47] Standards Mapping - Security Technical Implementation Guide Version 5.3
APSC-DV-000160 CAT II, APSC-DV-000170 CAT II, APSC-DV-001940 CAT II, APSC-DV-001950 CAT II, APSC-DV-002440 CAT I, APSC-DV-002450 CAT II, APSC-DV-002460 CAT II, APSC-DV-002470 CAT II[48] Standards Mapping - Security Technical Implementation Guide Version 6.1
APSC-DV-000160 CAT II, APSC-DV-000170 CAT II, APSC-DV-001940 CAT II, APSC-DV-001950 CAT II, APSC-DV-002440 CAT I, APSC-DV-002450 CAT II, APSC-DV-002460 CAT II, APSC-DV-002470 CAT II[49] Standards Mapping - Web Application Security Consortium Version 2.00
Insufficient Transport Layer Protection (WASC-04)[50] Standards Mapping - Web Application Security Consortium 24 + 2
Information Leakage