名稱: Incomplete Design Documentation
The product's design documentation does not adequately describe
control flow, data flow, system initialization, relationships between tasks,
components, rationales, or other important aspects of the
design.
一般資訊
引入方式
Architecture and DesignDocumentation
適用平台
技術
類別： Not Technology-Specific (Undetermined)類別： ICS/OT (Undetermined)
常見後果
| 範圍 | 影響 | 可能性 |
|---|---|---|
| Other | Reduce Maintainability | |
| Other | Increase Analytical Complexity |
漏洞對應備注
理由說明 : This entry is primarily a quality issue with no direct security implications.備註 : Look for weaknesses that are focused specifically on insecure behaviors that have more direct security implications.
參考資料
REF-963
Providing a Framework for Effective Software Quality AssessmentRobert A. Martin, Lawrence H. Shafer.
https://www.researchgate.net/publication/285403022_PROVIDING_A_FRAMEWORK_FOR_EFFECTIVE_SOFTWARE_QUALITY_MEASUREMENT_MAKING_A_SCIENCE_OF_RISK_ASSESSMENT
提交
| 名稱 | 機構 | 日期 | 發布日期 | Version |
|---|---|---|---|---|
| CWE Content Team | MITRE | 3.2 |
修改記錄
| 名稱 | 機構 | 日期 | 備註 |
|---|---|---|---|
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Applicable_Platforms, Relationships | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated Common_Consequences, Time_of_Introduction |
