名称: Incomplete Design Documentation
The product's design documentation does not adequately describe
control flow, data flow, system initialization, relationships between tasks,
components, rationales, or other important aspects of the
design.
基本信息
引入方式
Architecture and DesignDocumentation
适用平台
技术
类： Not Technology-Specific (Undetermined)类： ICS/OT (Undetermined)
常见后果
| 影响范围 | 影响 | 可能性 |
|---|---|---|
| Other | Reduce Maintainability | |
| Other | Increase Analytical Complexity |
漏洞映射说明
依据 : This entry is primarily a quality issue with no direct security implications.备注 : Look for weaknesses that are focused specifically on insecure behaviors that have more direct security implications.
参考资料
REF-963
Providing a Framework for Effective Software Quality AssessmentRobert A. Martin, Lawrence H. Shafer.
https://www.researchgate.net/publication/285403022_PROVIDING_A_FRAMEWORK_FOR_EFFECTIVE_SOFTWARE_QUALITY_MEASUREMENT_MAKING_A_SCIENCE_OF_RISK_ASSESSMENT
提交记录
| 名称 | 组织 | 日期 | 发布日期 | Version |
|---|---|---|---|---|
| CWE Content Team | MITRE | 3.2 |
修改记录
| 名称 | 组织 | 日期 | 备注 |
|---|---|---|---|
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Applicable_Platforms, Relationships | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated Common_Consequences, Time_of_Introduction |
