CWE-1112
Incomplete Documentation of Program Execution
2019-01-03
00h00 +00:00
00h00 +00:00
特定のCWEの通知
特定のCWEの変更情報をいち早くお届けします。
名前: Incomplete Documentation of Program Execution
The document does not fully define all mechanisms that are used
to control or influence how product-specific programs are
executed, such as environmental variables, configuration files, registry keys, command-line switches or options, or system settings.
一般情報
導入モード
Documentation適用可能なプラットフォーム
言語
クラス： Not Language-Specific (Undetermined)一般的な結果
| スコープ | 影響 | 可能性 |
|---|---|---|
| Other | Reduce Maintainability | |
| Other | Increase Analytical Complexity |
脆弱性マッピングノート
理由 : This entry is primarily a quality issue with no direct security implications.コメント : Look for weaknesses that are focused specifically on insecure behaviors that have more direct security implications.
参考文献
REF-963
Providing a Framework for Effective Software Quality AssessmentRobert A. Martin, Lawrence H. Shafer.
https://www.researchgate.net/publication/285403022_PROVIDING_A_FRAMEWORK_FOR_EFFECTIVE_SOFTWARE_QUALITY_MEASUREMENT_MAKING_A_SCIENCE_OF_RISK_ASSESSMENT
登録情報
| 名前 | 組織 | 日付 | リリース日 | Version |
|---|---|---|---|---|
| CWE Content Team | MITRE | 3.2 |
変更履歴
| 名前 | 組織 | 日付 | コメント |
|---|---|---|---|
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated Applicable_Platforms, Common_Consequences, Time_of_Introduction | |
| CWE Content Team | MITRE | updated Description |
