CWE-1125
Notificaciones para un CWE
Manténgase informado sobre cualquier cambio en un CWE específico.
Nombre: Excessive Attack Surface
The product has an attack surface whose quantitative
measurement exceeds a desirable maximum.
Informaciones generales
Modos de introducción
ImplementationArchitecture and Design
Plataformas aplicables
Lenguaje
Class: Not Language-Specific (Undetermined)Consecuencias comunes
| Alcance | Impacto | Probabilidad |
|---|---|---|
| Other | Varies by Context |
Notas de mapeo de vulnerabilidades
Justificación : This entry is primarily a quality issue with no direct security implications.Comentario : Look for weaknesses that are focused specifically on insecure behaviors that have more direct security implications.
Referencias
REF-966
An Attack Surface MetricPratyusa Manadhata.
http://reports-archive.adm.cs.cmu.edu/anon/2008/CMU-CS-08-152.pdf
REF-967
Measuring a System's Attack SurfacePratyusa Manadhata, Jeannette M. Wing.
http://www.cs.cmu.edu/afs/cs/usr/wing/www/publications/ManadhataWing04.pdf
Envío
| Nombre | Organización | Fecha | Fecha de lanzamiento | Version |
|---|---|---|---|---|
| CWE Content Team | MITRE | 3.2 |
Modificaciones
| Nombre | Organización | Fecha | Comentario |
|---|---|---|---|
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated Applicable_Platforms, Common_Consequences, Relationships, Time_of_Introduction |
