CWE-1125
Notifications pour un CWE
Restez informé de toutes modifications pour un CWE spécifique.
Nom: Excessive Attack Surface
The product has an attack surface whose quantitative
measurement exceeds a desirable maximum.
Informations générales
Modes d'introduction
ImplementationArchitecture and Design
Plateformes applicables
Langue
Class: Not Language-Specific (Undetermined)Conséquences courantes
| Portée | Impact | Probabilité |
|---|---|---|
| Other | Varies by Context |
Notes de cartographie des vulnérabilités
Justification : This entry is primarily a quality issue with no direct security implications.Commentaire : Look for weaknesses that are focused specifically on insecure behaviors that have more direct security implications.
Références
REF-966
An Attack Surface MetricPratyusa Manadhata.
http://reports-archive.adm.cs.cmu.edu/anon/2008/CMU-CS-08-152.pdf
REF-967
Measuring a System's Attack SurfacePratyusa Manadhata, Jeannette M. Wing.
http://www.cs.cmu.edu/afs/cs/usr/wing/www/publications/ManadhataWing04.pdf
Soumission
| Nom | Organisation | Date | Date de publication | Version |
|---|---|---|---|---|
| CWE Content Team | MITRE | 3.2 |
Modifications
| Nom | Organisation | Date | Commentaire |
|---|---|---|---|
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated Applicable_Platforms, Common_Consequences, Relationships, Time_of_Introduction |
