CWE-311
Overview
- CWE ID
- 311
- CWE Name
- Missing Encryption of Sensitive Data
- CWE Abstraction
- Class
- CWE structure
- Simple
- CWE Status
- Draft
Description
The software does not encrypt sensitive or critical information before storage or transmission.
Extended Description
The lack of proper data encryption passes up the guarantees of confidentiality, integrity, and accountability that properly implemented encryption conveys.
Related CWEs
| CWE ID | View ID | Nature | Ordinal |
|---|---|---|---|
| 693 | 1000 | ChildOf | Primary |