Detail Tampilan CWE-1340

CWE-1340

CISQ Data Protection Measures
2020-12-10 +00:00
Incomplete
Graph
2025-09-09 +00:00
CWE Mitre.org
Notifikasi untuk CWE tertentu
Tetap terinformasi tentang perubahan untuk CWE tertentu.
Kelola notifikasi

Nama: CISQ Data Protection Measures

This view outlines the SMM representation of the Automated Source Code Data Protection Measurement specifications, as identified by the Consortium for Information & Software Quality (CISQ) Working Group.

Anggota CWE

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer Dasar

CWE-672: Operation on a Resource after Expiration or Release Dasar

CWE-665: Improper Initialization Dasar

CWE-404: Improper Resource Shutdown or Release Dasar

CWE-611: Improper Restriction of XML External Entity Reference Dasar

CWE-99: Improper Control of Resource Identifiers Dasar

CWE-652: Improper Neutralization of Data within XQuery Expressions Dasar

CWE-643: Improper Neutralization of Data within XPath Expressions Dasar

CWE-90: Improper Neutralization of Special Elements used in an LDAP Query Dasar

CWE-89: Improper Neutralization of Special Elements used in an SQL Command Dasar

CWE-77: Improper Neutralization of Special Elements used in a Command Dasar

CWE-79: Improper Neutralization of Input During Web Page Generation Dasar

CWE-91: XML Injection Dasar

CWE-1051: Initialization with Hard-Coded Network Resource Configuration Data Dasar

CWE-424: Improper Protection of Alternate Path Dasar

CWE-798: Use of Hard-coded Credentials Dasar

CWE-681: Incorrect Conversion between Numeric Types Dasar

CWE-662: Improper Synchronization Dasar

CWE-704: Incorrect Type Conversion or Cast Dasar

CWE-562: Return of Stack Variable Address Dasar

CWE-170: Improper Null Termination Dasar

CWE-129: Improper Validation of Array Index Dasar

CWE-134: Use of Externally-Controlled Format String Dasar

CWE-606: Unchecked Input for Loop Condition Dasar

CWE-22: Improper Limitation of a Pathname to a Restricted Directory Dasar

CWE-434: Unrestricted Upload of File with Dangerous Type Dasar

CWE-703: Improper Check or Handling of Exceptional Conditions Dasar

CWE-908: Use of Uninitialized Resource Dasar

CWE-682: Incorrect Calculation Dasar

CWE-732: Incorrect Permission Assignment for Critical Resource Dasar

CWE-502: Deserialization of Untrusted Data Dasar

CWE-213: Exposure of Sensitive Information Due to Incompatible Policies Dasar

CWE-915: Improperly Controlled Modification of Dynamically-Determined Object Attributes Dasar

CWE-311: Missing Encryption of Sensitive Data Dasar

CWE-359: Exposure of Private Personal Information to an Unauthorized Actor Dasar

CWE-284: Improper Access Control Dasar

Informasi Tampilan CWE

Catatan Pemetaan Kerentanan

Justifikasi : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
Komentar : Use this View or other Views to search and navigate for the appropriate weakness.

Audiens

Pemangku kepentingan Deskripsi
Software Developers This view provides a good starting point for anyone involved in software development (including architects, designers, coders, and testers) to ensure that code quality issues are considered during the development process.
Product Vendors This view can help product vendors understand code quality issues and convey an overall status of their software.
Assessment Tool Vendors This view provides a good starting point for assessment tool vendors (e.g., vendors selling static analysis tools) who wish to understand what constitutes software with good code quality, and which quality issues may be of concern.

Pengajuan

Nama Organisasi Tanggal Tanggal rilis Version
CWE Content Team MITRE 2020-12-10 +00:00 2020-12-10 +00:00 4.3

Modifikasi

Nama Organisasi Tanggal Komentar
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes
CWE Content Team MITRE 2025-09-09 +00:00 updated References

Referensi

REF-1157

AUTOMATED SOURCE CODE MEASURE FOR DATA PROTECTION
Consortium for Information & Software Quality (CISQ).
https://www.it-cisq.org/automated-source-code-measure-data-protection/

Informasi yang disajikan di CVE Find berasal dari beberapa sumber referensi yang dipilih dengan cermat. Data CVE disediakan oleh MITRE Corporation dan National Vulnerability Database (NVD). Katalog Known Exploited Vulnerabilities (KEV) bersumber dari Cybersecurity and Infrastructure Security Agency (CISA), sementara skor EPSS berasal dari FIRST.org. Selain itu, data mengenai kelemahan perangkat lunak (CWE) dan pola serangan umum (CAPEC) dikelola oleh MITRE Corporation, dan informasi tentang konfigurasi perangkat keras dan perangkat lunak (CPE) disediakan oleh NVD.