CWE - CWE-898: CWE CATEGORY: SFP Primary Cluster: Authentication (4.18)

Home > CWE List > CWE- Individual Dictionary Definition (4.18)

CWE Glossary Definition

CWE CATEGORY: SFP Primary Cluster: Authentication

Category ID: 898

Vulnerability Mapping: PROHIBITED This CWE ID must not be used to map to real-world vulnerabilities

Summary

This category identifies Software Fault Patterns (SFPs) within the Authentication cluster (SFP29, SFP30, SFP31, SFP32, SFP33, SFP34).

Membership

Nature	Type	ID	Name
MemberOf	ViewView - a subset of CWE entries that provides a way of examining CWE content. The two main view structures are Slices (flat lists) and Graphs (containing relationships between entries).	888	Software Fault Pattern (SFP) Clusters
HasMember	CategoryCategory - a CWE entry that contains a set of other entries that share a common characteristic.	947	SFP Secondary Cluster: Authentication Bypass
HasMember	CategoryCategory - a CWE entry that contains a set of other entries that share a common characteristic.	948	SFP Secondary Cluster: Digital Certificate
HasMember	CategoryCategory - a CWE entry that contains a set of other entries that share a common characteristic.	949	SFP Secondary Cluster: Faulty Endpoint Authentication
HasMember	CategoryCategory - a CWE entry that contains a set of other entries that share a common characteristic.	950	SFP Secondary Cluster: Hardcoded Sensitive Data
HasMember	CategoryCategory - a CWE entry that contains a set of other entries that share a common characteristic.	951	SFP Secondary Cluster: Insecure Authentication Policy
HasMember	CategoryCategory - a CWE entry that contains a set of other entries that share a common characteristic.	952	SFP Secondary Cluster: Missing Authentication
HasMember	CategoryCategory - a CWE entry that contains a set of other entries that share a common characteristic.	953	SFP Secondary Cluster: Missing Endpoint Authentication
HasMember	CategoryCategory - a CWE entry that contains a set of other entries that share a common characteristic.	954	SFP Secondary Cluster: Multiple Binds to the Same Port
HasMember	CategoryCategory - a CWE entry that contains a set of other entries that share a common characteristic.	955	SFP Secondary Cluster: Unrestricted Authentication

Vulnerability Mapping Notes

Usage: PROHIBITED

(this CWE ID must not be used to map to real-world vulnerabilities)

Reason: Category

Rationale:

This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.

Comments:

See member weaknesses of this category.

Content History

Submissions
Submission Date	Submitter	Organization
2012年03月22日 (CWE 2.2, 2012年05月14日)	CWE Content Team	MITRE
2012年03月22日 (CWE 2.2, 2012年05月14日)
Modifications
Modification Date	Modifier	Organization
2013年07月17日	CWE Content Team	MITRE
2013年07月17日	updated Relationships
2014年07月30日	CWE Content Team	MITRE
2014年07月30日	updated Name, Relationships
2020年02月24日	CWE Content Team	MITRE
2020年02月24日	updated Description
2023年04月27日	CWE Content Team	MITRE
2023年04月27日	updated Mapping_Notes
2023年06月29日	CWE Content Team	MITRE
2023年06月29日	updated Mapping_Notes
Previous Entry Names
Change Date	Previous Entry Name
2014年07月31日	SFP Cluster: Authentication

More information is available — Please edit the custom filter or select a different filter.

Page Last Updated: September 09, 2025

MITRE

Use of the Common Weakness Enumeration (CWE™) and the associated references from this website are subject to the Terms of Use. CWE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) and managed by the Homeland Security Systems Engineering and Development Institute (HSSEDI) which is operated by The MITRE Corporation (MITRE). Copyright © 2006–2025, The MITRE Corporation. CWE, CWSS, CWRAF, and the CWE logo are trademarks of The MITRE Corporation.

HSSEDI