CWE-1305 뷰 상세 정보

CWE-1305

CISQ Quality Measures (2020)
2020-08-18 +00:00
Incomplete
Graph
2023-06-29 +00:00
CWE Mitre.org
특정 CWE 알림
특정 CWE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

이름: CISQ Quality Measures (2020)

This view outlines the most important software quality issues as identified by the Consortium for Information & Software Quality (CISQ) Automated Quality Characteristic Measures, released in 2020. These measures are derived from Object Management Group (OMG) standards.

CWE 구성원

CWE-1306: Weaknesses in this category are related to the CISQ Quality Measures for Reliability. Presence of these weaknesses could reduce the reliability of the software.
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer 기본
CWE-170: Improper Null Termination 기본
CWE-252: Unchecked Return Value 기본
CWE-390: Detection of Error Condition Without Action 기본
CWE-394: Unexpected Status Code or Return Value 기본
CWE-404: Improper Resource Shutdown or Release 기본
CWE-424: Improper Protection of Alternate Path 기본
CWE-459: Incomplete Cleanup 기본
CWE-476: NULL Pointer Dereference 기본
CWE-480: Use of Incorrect Operator 기본
CWE-484: Omitted Break Statement in Switch 기본
CWE-562: Return of Stack Variable Address 기본
CWE-595: Comparison of Object References Instead of Object Contents 기본
CWE-662: Improper Synchronization 기본
CWE-665: Improper Initialization 기본
CWE-672: Operation on a Resource after Expiration or Release 기본
CWE-681: Incorrect Conversion between Numeric Types 기본
CWE-682: Incorrect Calculation 기본
CWE-703: Improper Check or Handling of Exceptional Conditions 기본
CWE-704: Incorrect Type Conversion or Cast 기본
CWE-758: Reliance on Undefined, Unspecified, or Implementation-Defined Behavior 기본
CWE-835: Loop with Unreachable Exit Condition 기본
CWE-908: Use of Uninitialized Resource 기본
CWE-1045: Parent Class with a Virtual Destructor and a Child Class without a Virtual Destructor 기본
CWE-1051: Initialization with Hard-Coded Network Resource Configuration Data 기본
CWE-1066: Missing Serialization Control Element 기본
CWE-1070: Serializable Data Element Containing non-Serializable Item Elements 기본
CWE-1077: Floating Point Comparison with Incorrect Operator 기본
CWE-1079: Parent Class without Virtual Destructor Method 기본
CWE-1082: Class Instance Self Destruction Control Element 기본
CWE-1083: Data Access from Outside Expected Data Manager Component 기본
CWE-1087: Class with Virtual Method without a Virtual Destructor 기본
CWE-1088: Synchronous Access of Remote Resource without Timeout 기본
CWE-1098: Data Element containing Pointer Item without Proper Copy Control Element 기본
CWE-1307: Weaknesses in this category are related to the CISQ Quality Measures for Maintainability. Presence of these weaknesses could reduce the maintainability of the software.
CWE-407: Inefficient Algorithmic Complexity 기본
CWE-478: Missing Default Case in Multiple Condition Expression 기본
CWE-480: Use of Incorrect Operator 기본
CWE-484: Omitted Break Statement in Switch 기본
CWE-561: Dead Code 기본
CWE-570: Expression is Always False 기본
CWE-571: Expression is Always True 기본
CWE-783: Operator Precedence Logic Error 기본
CWE-1041: Use of Redundant Code 기본
CWE-1045: Parent Class with a Virtual Destructor and a Child Class without a Virtual Destructor 기본
CWE-1047: Modules with Circular Dependencies 기본
CWE-1048: Invokable Control Element with Large Number of Outward Calls 기본
CWE-1051: Initialization with Hard-Coded Network Resource Configuration Data 기본
CWE-1052: Excessive Use of Hard-Coded Literals in Initialization 기본
CWE-1054: Invocation of a Control Element at an Unnecessarily Deep Horizontal Layer 기본
CWE-1055: Multiple Inheritance from Concrete Classes 기본
CWE-1062: Parent Class with References to Child Class 기본
CWE-1064: Invokable Control Element with Signature Containing an Excessive Number of Parameters 기본
CWE-1074: Class with Excessively Deep Inheritance 기본
CWE-1075: Unconditional Control Flow Transfer outside of Switch Block 기본
CWE-1079: Parent Class without Virtual Destructor Method 기본
CWE-1080: Source Code File with Excessive Number of Lines of Code 기본
CWE-1084: Invokable Control Element with Excessive File or Data Access Operations 기본
CWE-1085: Invokable Control Element with Excessive Volume of Commented-out Code 기본
CWE-1086: Class with Excessive Number of Child Classes 기본
CWE-1087: Class with Virtual Method without a Virtual Destructor 기본
CWE-1090: Method Containing Access of a Member Element from Another Class 기본
CWE-1095: Loop Condition Value Update within the Loop 기본
CWE-1308: Weaknesses in this category are related to the CISQ Quality Measures for Security. Presence of these weaknesses could reduce the security of the software.
CWE-22: Improper Limitation of a Pathname to a Restricted Directory 기본
CWE-77: Improper Neutralization of Special Elements used in a Command 기본
CWE-89: Improper Neutralization of Special Elements used in an SQL Command 기본
CWE-90: Improper Neutralization of Special Elements used in an LDAP Query 기본
CWE-91: XML Injection 기본
CWE-99: Improper Control of Resource Identifiers 기본
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer 기본
CWE-129: Improper Validation of Array Index 기본
CWE-134: Use of Externally-Controlled Format String 기본
CWE-252: Unchecked Return Value 기본
CWE-404: Improper Resource Shutdown or Release 기본
CWE-424: Improper Protection of Alternate Path 기본
CWE-434: Unrestricted Upload of File with Dangerous Type 기본
CWE-477: Use of Obsolete Function 기본
CWE-480: Use of Incorrect Operator 기본
CWE-502: Deserialization of Untrusted Data 기본
CWE-570: Expression is Always False 기본
CWE-571: Expression is Always True 기본
CWE-606: Unchecked Input for Loop Condition 기본
CWE-611: Improper Restriction of XML External Entity Reference 기본
CWE-643: Improper Neutralization of Data within XPath Expressions 기본
CWE-652: Improper Neutralization of Data within XQuery Expressions 기본
CWE-662: Improper Synchronization 기본
CWE-665: Improper Initialization 기본
CWE-672: Operation on a Resource after Expiration or Release 기본
CWE-681: Incorrect Conversion between Numeric Types 기본
CWE-682: Incorrect Calculation 기본
CWE-732: Incorrect Permission Assignment for Critical Resource 기본
CWE-778: Insufficient Logging 기본
CWE-783: Operator Precedence Logic Error 기본
CWE-789: Memory Allocation with Excessive Size Value 기본
CWE-79: Improper Neutralization of Input During Web Page Generation 기본
CWE-798: Use of Hard-coded Credentials 기본
CWE-835: Loop with Unreachable Exit Condition 기본

CWE 뷰 정보

취약점 매핑 메모

근거 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
댓글 : Use this View or other Views to search and navigate for the appropriate weakness.

대상

이해관계자 설명
Software Developers This view provides a good starting point for anyone involved in software development (including architects, designers, coders, and testers) to ensure that code quality issues are considered during the development process.
Product Vendors This view can help product vendors understand code quality issues and convey an overall status of their software.
Assessment Tool Vendors This view provides a good starting point for assessment tool vendors (e.g., vendors selling static analysis tools) who wish to understand what constitutes software with good code quality, and which quality issues may be of concern.

제출

이름 조직 날짜 출시일 Version
CWE Content Team MITRE 2020-08-18 +00:00 2020-08-20 +00:00 4.2

수정 사항

이름 조직 날짜 댓글
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes

참고 자료

REF-1133

Automated Source Code Quality Measures
Consortium for Information & Software Quality (CISQ).
https://www.omg.org/spec/ASCQM/

CVE Find에 제시된 정보는 엄선된 여러 참고 소스에서 가져옵니다. CVE 데이터는 MITRE Corporation과 국가 취약점 데이터베이스(NVD)에서 제공됩니다. KEV 카탈로그는 CISA에서 가져오며, EPSS 점수는 FIRST.org에서 제공됩니다. CWE 및 CAPEC 데이터는 MITRE Corporation에서 관리하며, CPE 정보는 NVD에서 제공됩니다.