CWE-1110 Detail

CWE-1110

Incomplete Design Documentation
Incomplete
2019-01-03
00h00 +00:00
2025-12-11
00h00 +00:00
Notifiche per un CWE specifico
Rimani informato su qualsiasi modifica relativa a un CWE specifico.
Gestione notifiche

Nome: Incomplete Design Documentation

The product's design documentation does not adequately describe control flow, data flow, system initialization, relationships between tasks, components, rationales, or other important aspects of the design.

General Informations

Modes Of Introduction

Architecture and Design
Documentation

Piattaforme applicabili

Tecnologie

Class: Not Technology-Specific (Undetermined)
Class: ICS/OT (Undetermined)

Conseguenze comuni

Ambito Impatto Probabilità
OtherReduce Maintainability
OtherIncrease Analytical Complexity

Note sulla mappatura delle vulnerabilità

Giustificazione : This entry is primarily a quality issue with no direct security implications.
Commento : Look for weaknesses that are focused specifically on insecure behaviors that have more direct security implications.

Riferimenti

REF-963

Providing a Framework for Effective Software Quality Assessment
Robert A. Martin, Lawrence H. Shafer.
https://www.researchgate.net/publication/285403022_PROVIDING_A_FRAMEWORK_FOR_EFFECTIVE_SOFTWARE_QUALITY_MEASUREMENT_MAKING_A_SCIENCE_OF_RISK_ASSESSMENT

Invio

Nome Organizzazione Data Data di rilascio Version
CWE Content Team MITRE 2018-07-02 +00:00 2019-01-03 +00:00 3.2

Modifiche

Nome Organizzazione Data Commento
CWE Content Team MITRE 2020-02-24 +00:00 updated Relationships
CWE Content Team MITRE 2023-01-31 +00:00 updated Applicable_Platforms, Relationships
CWE Content Team MITRE 2023-04-27 +00:00 updated Relationships
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes
CWE Content Team MITRE 2024-02-29 +00:00 updated Mapping_Notes
CWE Content Team MITRE 2025-12-11 +00:00 updated Common_Consequences, Time_of_Introduction