이름: CISQ Data Protection Measures

This view outlines the SMM representation of the Automated Source Code Data Protection Measurement specifications, as identified by the Consortium for Information & Software Quality (CISQ) Working Group.

CWE 구성원

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer 기본

CWE-672: Operation on a Resource after Expiration or Release 기본

CWE-665: Improper Initialization 기본

CWE-404: Improper Resource Shutdown or Release 기본

CWE-611: Improper Restriction of XML External Entity Reference 기본

CWE-99: Improper Control of Resource Identifiers 기본

CWE-652: Improper Neutralization of Data within XQuery Expressions 기본

CWE-643: Improper Neutralization of Data within XPath Expressions 기본

CWE-90: Improper Neutralization of Special Elements used in an LDAP Query 기본

CWE-89: Improper Neutralization of Special Elements used in an SQL Command 기본

CWE-77: Improper Neutralization of Special Elements used in a Command 기본

CWE-79: Improper Neutralization of Input During Web Page Generation 기본

CWE-91: XML Injection 기본

CWE-1051: Initialization with Hard-Coded Network Resource Configuration Data 기본

CWE-424: Improper Protection of Alternate Path 기본

CWE-798: Use of Hard-coded Credentials 기본

CWE-681: Incorrect Conversion between Numeric Types 기본

CWE-662: Improper Synchronization 기본

CWE-704: Incorrect Type Conversion or Cast 기본

CWE-562: Return of Stack Variable Address 기본

CWE-170: Improper Null Termination 기본

CWE-129: Improper Validation of Array Index 기본

CWE-134: Use of Externally-Controlled Format String 기본

CWE-606: Unchecked Input for Loop Condition 기본

CWE-22: Improper Limitation of a Pathname to a Restricted Directory 기본

CWE-434: Unrestricted Upload of File with Dangerous Type 기본

CWE-703: Improper Check or Handling of Exceptional Conditions 기본

CWE-908: Use of Uninitialized Resource 기본

CWE-682: Incorrect Calculation 기본

CWE-732: Incorrect Permission Assignment for Critical Resource 기본

CWE-502: Deserialization of Untrusted Data 기본

CWE-213: Exposure of Sensitive Information Due to Incompatible Policies 기본

CWE-915: Improperly Controlled Modification of Dynamically-Determined Object Attributes 기본

CWE-311: Missing Encryption of Sensitive Data 기본

CWE-359: Exposure of Private Personal Information to an Unauthorized Actor 기본

CWE-284: Improper Access Control 기본

CWE 뷰 정보

취약점 매핑 메모

근거 : This entry is a View. Views are not weaknesses and therefore inappropriate to describe the root causes of vulnerabilities.
댓글 : Use this View or other Views to search and navigate for the appropriate weakness.

대상

이해관계자	설명
Software Developers	This view provides a good starting point for anyone involved in software development (including architects, designers, coders, and testers) to ensure that code quality issues are considered during the development process.
Product Vendors	This view can help product vendors understand code quality issues and convey an overall status of their software.
Assessment Tool Vendors	This view provides a good starting point for assessment tool vendors (e.g., vendors selling static analysis tools) who wish to understand what constitutes software with good code quality, and which quality issues may be of concern.

제출

이름	조직	날짜	출시일	Version
CWE Content Team	MITRE	2020-12-10 +00:00	2020-12-10 +00:00	4.3

수정 사항

이름	조직	날짜	댓글
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes
CWE Content Team	MITRE	2025-09-09 +00:00	updated References

참고 자료

REF-1157

AUTOMATED SOURCE CODE MEASURE FOR DATA PROTECTION
Consortium for Information & Software Quality (CISQ).
https://www.it-cisq.org/automated-source-code-measure-data-protection/

CWE-1340 뷰 상세 정보

CWE-1340