Software and data integrity failures

Failure to verify that code, updates and data have not been altered, so tampering goes unnoticed.

Covers failures to verify the integrity of code, updates, build pipelines and data. Unsafe processing of untrusted serialised data is under Insecure deserialisation.

Scheme

Broader terms