Detail Kelemahan Perangkat Lunak CWE-888 | CVE Find

Vendor dan Produk

CPE, singkatan dari Common Platform Enumeration, adalah skema standar untuk penamaan perangkat keras, perangkat lunak, dan sistem operasi. CPE menyediakan skema penamaan terstruktur untuk mengidentifikasi dan mengklasifikasikan sistem teknologi informasi, platform, dan paket secara unik berdasarkan atribut tertentu seperti vendor, nama produk, versi, pembaruan, edisi, dan bahasa.

Nama: Software Fault Pattern (SFP) Clusters

CWE identifiers in this view are associated with clusters of Software Fault Patterns (SFPs).

Anggota CWE

CWE-885: SFP Primary Cluster: Risky Values Kategori

CWE-885: This category identifies Software Fault Patterns (SFPs) within the Risky Values cluster (SFP1).

CWE-998: SFP Secondary Cluster: Glitch in Computation Kategori

CWE-886: SFP Primary Cluster: Unused entities Kategori

CWE-886: This category identifies Software Fault Patterns (SFPs) within the Unused entities cluster (SFP2).

CWE-482: Comparing instead of Assigning Dasar

CWE-561: Dead Code Dasar

CWE-563: Assignment to Variable without Use Dasar

CWE-887: SFP Primary Cluster: API Kategori

CWE-887: This category identifies Software Fault Patterns (SFPs) within the API cluster (SFP3).

CWE-1001: SFP Secondary Cluster: Use of an Improper API Kategori

CWE-889: SFP Primary Cluster: Exception Management Kategori

CWE-889: This category identifies Software Fault Patterns (SFPs) within the Exception Management cluster (SFP4, SFP5, SFP6).

CWE-960: SFP Secondary Cluster: Ambiguous Exception Type Kategori

CWE-961: SFP Secondary Cluster: Incorrect Exception Behavior Kategori

CWE-962: SFP Secondary Cluster: Unchecked Status Condition Kategori

CWE-890: SFP Primary Cluster: Memory Access Kategori

CWE-890: This category identifies Software Fault Patterns (SFPs) within the Memory Access cluster (SFP7, SFP8).

CWE-970: SFP Secondary Cluster: Faulty Buffer Access Kategori

CWE-971: SFP Secondary Cluster: Faulty Pointer Use Kategori

CWE-972: SFP Secondary Cluster: Faulty String Expansion Kategori

CWE-973: SFP Secondary Cluster: Improper NULL Termination Kategori

CWE-974: SFP Secondary Cluster: Incorrect Buffer Length Computation Kategori

CWE-891: SFP Primary Cluster: Memory Management Kategori

CWE-891: This category identifies Software Fault Patterns (SFPs) within the Memory Management cluster (SFP38).

CWE-969: SFP Secondary Cluster: Faulty Memory Release Kategori

CWE-892: SFP Primary Cluster: Resource Management Kategori

CWE-892: This category identifies Software Fault Patterns (SFPs) within the Resource Management cluster (SFP37).

CWE-982: SFP Secondary Cluster: Failure to Release Resource Kategori

CWE-983: SFP Secondary Cluster: Faulty Resource Use Kategori

CWE-984: SFP Secondary Cluster: Life Cycle Kategori

CWE-985: SFP Secondary Cluster: Unrestricted Consumption Kategori

CWE-893: SFP Primary Cluster: Path Resolution Kategori

CWE-893: This category identifies Software Fault Patterns (SFPs) within the Path Resolution cluster (SFP16, SFP17, SFP18).

CWE-979: SFP Secondary Cluster: Failed Chroot Jail Kategori

CWE-980: SFP Secondary Cluster: Link in Resource Name Resolution Kategori

CWE-981: SFP Secondary Cluster: Path Traversal Kategori

CWE-894: SFP Primary Cluster: Synchronization Kategori

CWE-894: This category identifies Software Fault Patterns (SFPs) within the Synchronization cluster (SFP19, SFP20, SFP21, SFP22).

CWE-986: SFP Secondary Cluster: Missing Lock Kategori

CWE-987: SFP Secondary Cluster: Multiple Locks/Unlocks Kategori

CWE-988: SFP Secondary Cluster: Race Condition Window Kategori

CWE-989: SFP Secondary Cluster: Unrestricted Lock Kategori

CWE-895: SFP Primary Cluster: Information Leak Kategori

CWE-895: This category identifies Software Fault Patterns (SFPs) within the Information Leak cluster (SFP23).

CWE-963: SFP Secondary Cluster: Exposed Data Kategori

CWE-964: SFP Secondary Cluster: Exposure Temporary File Kategori

CWE-965: SFP Secondary Cluster: Insecure Session Management Kategori

CWE-966: SFP Secondary Cluster: Other Exposures Kategori

CWE-967: SFP Secondary Cluster: State Disclosure Kategori

CWE-896: SFP Primary Cluster: Tainted Input Kategori

CWE-896: This category identifies Software Fault Patterns (SFPs) within the Tainted Input cluster (SFP24, SFP25, SFP26, SFP27).

CWE-990: SFP Secondary Cluster: Tainted Input to Command Kategori

CWE-991: SFP Secondary Cluster: Tainted Input to Environment Kategori

CWE-992: SFP Secondary Cluster: Faulty Input Transformation Kategori

CWE-993: SFP Secondary Cluster: Incorrect Input Handling Kategori

CWE-994: SFP Secondary Cluster: Tainted Input to Variable Kategori

CWE-897: SFP Primary Cluster: Entry Points Kategori

CWE-897: This category identifies Software Fault Patterns (SFPs) within the Entry Points cluster (SFP28).

CWE-1002: SFP Secondary Cluster: Unexpected Entry Points Kategori

CWE-898: SFP Primary Cluster: Authentication Kategori

CWE-898: This category identifies Software Fault Patterns (SFPs) within the Authentication cluster (SFP29, SFP30, SFP31, SFP32, SFP33, SFP34).

CWE-947: SFP Secondary Cluster: Authentication Bypass Kategori

CWE-948: SFP Secondary Cluster: Digital Certificate Kategori

CWE-949: SFP Secondary Cluster: Faulty Endpoint Authentication Kategori

CWE-950: SFP Secondary Cluster: Hardcoded Sensitive Data Kategori

CWE-951: SFP Secondary Cluster: Insecure Authentication Policy Kategori

CWE-952: SFP Secondary Cluster: Missing Authentication Kategori

CWE-953: SFP Secondary Cluster: Missing Endpoint Authentication Kategori

CWE-954: SFP Secondary Cluster: Multiple Binds to the Same Port Kategori

CWE-955: SFP Secondary Cluster: Unrestricted Authentication Kategori

CWE-899: SFP Primary Cluster: Access Control Kategori

CWE-899: This category identifies Software Fault Patterns (SFPs) within the Access Control cluster (SFP35).

CWE-944: SFP Secondary Cluster: Access Management Kategori

CWE-945: SFP Secondary Cluster: Insecure Resource Access Kategori

CWE-946: SFP Secondary Cluster: Insecure Resource Permissions Kategori

CWE-901: SFP Primary Cluster: Privilege Kategori

CWE-901: This category identifies Software Fault Patterns (SFPs) within the Privilege cluster (SFP36).

CWE-250: Execution with Unnecessary Privileges Dasar

CWE-266: Incorrect Privilege Assignment Dasar

CWE-267: Privilege Defined With Unsafe Actions Dasar

CWE-268: Privilege Chaining Dasar

CWE-269: Improper Privilege Management Dasar

CWE-270: Privilege Context Switching Error Dasar

CWE-271: Privilege Dropping / Lowering Errors Dasar

CWE-272: Least Privilege Violation Dasar

CWE-274: Improper Handling of Insufficient Privileges Dasar

CWE-520: .NET Misconfiguration: Use of Impersonation Dasar

CWE-653: Improper Isolation or Compartmentalization Dasar

CWE-9: J2EE Misconfiguration: Weak Access Permissions for EJB Methods Dasar

CWE-902: SFP Primary Cluster: Channel Kategori

CWE-902: This category identifies Software Fault Patterns (SFPs) within the Channel cluster.

CWE-956: SFP Secondary Cluster: Channel Attack Kategori

CWE-957: SFP Secondary Cluster: Protocol Error Kategori

CWE-903: SFP Primary Cluster: Cryptography Kategori

CWE-903: This category identifies Software Fault Patterns (SFPs) within the Cryptography cluster.

CWE-958: SFP Secondary Cluster: Broken Cryptography Kategori

CWE-959: SFP Secondary Cluster: Weak Cryptography Kategori

CWE-904: SFP Primary Cluster: Malware Kategori

CWE-904: This category identifies Software Fault Patterns (SFPs) within the Malware cluster.

CWE-506: Embedded Malicious Code Dasar

CWE-507: Trojan Horse Dasar

CWE-508: Non-Replicating Malicious Code Dasar

CWE-509: Replicating Malicious Code (Virus or Worm) Dasar

CWE-510: Trapdoor Dasar

CWE-511: Logic/Time Bomb Dasar

CWE-512: Spyware Dasar

CWE-69: Improper Handling of Windows ::DATA Alternate Data Stream Dasar

CWE-968: SFP Secondary Cluster: Covert Channel Kategori

CWE-905: SFP Primary Cluster: Predictability Kategori

CWE-905: This category identifies Software Fault Patterns (SFPs) within the Predictability cluster.

CWE-330: Use of Insufficiently Random Values Dasar

CWE-331: Insufficient Entropy Dasar

CWE-332: Insufficient Entropy in PRNG Dasar

CWE-333: Improper Handling of Insufficient Entropy in TRNG Dasar

CWE-334: Small Space of Random Values Dasar

CWE-335: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) Dasar

CWE-336: Same Seed in Pseudo-Random Number Generator (PRNG) Dasar

CWE-337: Predictable Seed in Pseudo-Random Number Generator (PRNG) Dasar

CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) Dasar

CWE-339: Small Seed Space in PRNG Dasar

CWE-340: Generation of Predictable Numbers or Identifiers Dasar

CWE-341: Predictable from Observable State Dasar

CWE-342: Predictable Exact Value from Previous Values Dasar

CWE-343: Predictable Value Range from Previous Values Dasar

CWE-344: Use of Invariant Value in Dynamically Changing Context Dasar

CWE-906: SFP Primary Cluster: UI Kategori

CWE-906: This category identifies Software Fault Patterns (SFPs) within the UI cluster.

CWE-995: SFP Secondary Cluster: Feature Kategori

CWE-996: SFP Secondary Cluster: Security Kategori

CWE-997: SFP Secondary Cluster: Information Loss Kategori

CWE-907: SFP Primary Cluster: Other Kategori

CWE-907: This category identifies Software Fault Patterns (SFPs) within the Other cluster.

CWE-975: SFP Secondary Cluster: Architecture Kategori

CWE-976: SFP Secondary Cluster: Compiler Kategori

CWE-977: SFP Secondary Cluster: Design Kategori

CWE-978: SFP Secondary Cluster: Implementation Kategori

CWE-1237: SFP Primary Cluster: Faulty Resource Release Kategori

CWE-1237: This category identifies Software Fault Patterns (SFPs) within the Faulty Resource Release cluster (SFP37).

CWE-415: Double Free Dasar

CWE-762: Mismatched Memory Management Routines Dasar

CWE-763: Release of Invalid Pointer or Reference Dasar

CWE-1238: SFP Primary Cluster: Failure to Release Memory Kategori

CWE-1238: This category identifies Software Fault Patterns (SFPs) within the Failure to Release Memory cluster (SFP38).

CWE-401: Missing Release of Memory after Effective Lifetime Dasar

Informasi Tampilan CWE

Catatan Pemetaan Kerentanan

Justifikasi : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
Komentar : Use this View or other Views to search and navigate for the appropriate weakness.

Audiens

Pemangku kepentingan	Deskripsi
Applied Researchers
Academic Researchers
Product Vendors

Pengajuan

Nama	Organisasi	Tanggal	Tanggal rilis	Version
CWE Content Team	MITRE	2012-03-22 +00:00	2012-05-14 +00:00	2.2

Modifikasi

Nama	Organisasi	Tanggal	Komentar
CWE Content Team	MITRE	2020-02-24 +00:00	updated References, View_Audience
CWE Content Team	MITRE	2020-08-20 +00:00	updated Relationships
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes
CWE Content Team	MITRE	2025-09-09 +00:00	updated References

Referensi

REF-19

System Assurance
Nikolai Mansourov, Djenana Campara.
https://www.elsevier.com/books/system-assurance/mansourov/978-0-12-381414-2

REF-20

Task Order 0006: Vulnerability Path Analysis and Demonstration (VPAD). Volume 2 - White Box Definitions of Software Fault Patterns
Ben Calloni, Nikolai Mansourov, Djenana Campara.
https://apps.dtic.mil/sti/tr/pdf/ADB381215.pdf

Informasi yang disajikan di CVE Find berasal dari beberapa sumber referensi yang dipilih dengan cermat. Data CVE disediakan oleh MITRE Corporation dan National Vulnerability Database (NVD). Katalog Known Exploited Vulnerabilities (KEV) bersumber dari Cybersecurity and Infrastructure Security Agency (CISA), sementara skor EPSS berasal dari FIRST.org. Selain itu, data mengenai kelemahan perangkat lunak (CWE) dan pola serangan umum (CAPEC) dikelola oleh MITRE Corporation, dan informasi tentang konfigurasi perangkat keras dan perangkat lunak (CPE) disediakan oleh NVD.