CWE-1125
Excessive Attack Surface
2019-01-03
00h00 +00:00
00h00 +00:00
Notifikasi untuk CWE tertentu
Tetap terinformasi tentang perubahan untuk CWE tertentu.
Nama: Excessive Attack Surface
The product has an attack surface whose quantitative
measurement exceeds a desirable maximum.
Informasi Umum
Detail Latar Belakang
Mode Pengenalan
ImplementationArchitecture and Design
Platform yang Berlaku
Bahasa
Kelas: Not Language-Specific (Undetermined)Konsekuensi Umum
| Cakupan | Dampak | Kemungkinan |
|---|---|---|
| Other | Varies by Context |
Catatan Pemetaan Kerentanan
Justifikasi : This entry is primarily a quality issue with no direct security implications.Komentar : Look for weaknesses that are focused specifically on insecure behaviors that have more direct security implications.
Referensi
REF-966
An Attack Surface MetricPratyusa Manadhata.
http://reports-archive.adm.cs.cmu.edu/anon/2008/CMU-CS-08-152.pdf
REF-967
Measuring a System's Attack SurfacePratyusa Manadhata, Jeannette M. Wing.
http://www.cs.cmu.edu/afs/cs/usr/wing/www/publications/ManadhataWing04.pdf
Pengajuan
| Nama | Organisasi | Tanggal | Tanggal rilis | Version |
|---|---|---|---|---|
| CWE Content Team | MITRE | 3.2 |
Modifikasi
| Nama | Organisasi | Tanggal | Komentar |
|---|---|---|---|
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated Applicable_Platforms, Common_Consequences, Relationships, Time_of_Introduction | |
| CWE Content Team | MITRE | updated Background_Details, Description |
