CWE-1110
Incomplete Design Documentation
2019-01-03
00h00 +00:00
00h00 +00:00
特定のCWEの通知
特定のCWEの変更情報をいち早くお届けします。
名前: Incomplete Design Documentation
The product's design documentation does not adequately describe
control flow, data flow, system initialization, relationships between tasks,
components, rationales, or other important aspects of the
design.
一般情報
導入モード
Architecture and DesignDocumentation
適用可能なプラットフォーム
テクノロジー
クラス： Not Technology-Specific (Undetermined)クラス： ICS/OT (Undetermined)
一般的な結果
| スコープ | 影響 | 可能性 |
|---|---|---|
| Other | Reduce Maintainability | |
| Other | Increase Analytical Complexity |
脆弱性マッピングノート
理由 : This entry is primarily a quality issue with no direct security implications.コメント : Look for weaknesses that are focused specifically on insecure behaviors that have more direct security implications.
参考文献
REF-963
Providing a Framework for Effective Software Quality AssessmentRobert A. Martin, Lawrence H. Shafer.
https://www.researchgate.net/publication/285403022_PROVIDING_A_FRAMEWORK_FOR_EFFECTIVE_SOFTWARE_QUALITY_MEASUREMENT_MAKING_A_SCIENCE_OF_RISK_ASSESSMENT
登録情報
| 名前 | 組織 | 日付 | リリース日 | Version |
|---|---|---|---|---|
| CWE Content Team | MITRE | 3.2 |
変更履歴
| 名前 | 組織 | 日付 | コメント |
|---|---|---|---|
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Applicable_Platforms, Relationships | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated Common_Consequences, Time_of_Introduction |
