Content is hidden
Insecure Authorization
Business Logic Errors
Violation of Secure Design Principles
Session Fixation
Other
Failure to Invalidate Session
Brute Force
Open Redirect