CWE-1418 軟體弱點詳細資料 | CVE Find

廠商與產品

CPE（通用平台枚舉）是一種用於命名硬體、軟體和作業系統的標準化方案。CPE 提供結構化命名方式，可根據廠商、產品名稱、版本、更新、版次和語言等特定屬性，唯一識別和分類資訊技術系統、平台和套件。

名稱: Comprehensive Categorization: Violation of Secure Design Principles

Weaknesses in this category are related to violation of secure design principles.

CWE 成員列表

CWE-250: Execution with Unnecessary Privileges 基礎

CWE-424: Improper Protection of Alternate Path 基礎

CWE-447: Unimplemented or Unsupported Feature in UI 基礎

CWE-636: Not Failing Securely 基礎

CWE-637: Unnecessary Complexity in Protection Mechanism (Not Using 'Economy of Mechanism') 基礎

CWE-638: Not Using Complete Mediation 基礎

CWE-653: Improper Isolation or Compartmentalization 基礎

CWE-654: Reliance on a Single Factor in a Security Decision 基礎

CWE-655: Insufficient Psychological Acceptability 基礎

CWE-656: Reliance on Security Through Obscurity 基礎

CWE-657: Violation of Secure Design Principles 基礎

CWE-671: Lack of Administrator Control over Security 基礎

CWE-1189: Improper Isolation of Shared Resources on System-on-a-Chip (SoC) 基礎

CWE-1192: Improper Identifier for IP Block used in System-On-Chip (SOC) 基礎

CWE-1303: Non-Transparent Sharing of Microarchitectural Resources 基礎

CWE-1331: Improper Isolation of Shared Resources in Network On Chip (NoC) 基礎

CWE-1395: Dependency on Vulnerable Third-Party Component 基礎

CWE 資訊

漏洞對應備注

理由說明 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves [REF-1330].
備註 : See member weaknesses of this category.

提交

名稱	機構	日期	發布日期	Version
CWE Content Team	MITRE	2023-04-25 +00:00	2023-04-23 +00:00	4.11

修改記錄

名稱	機構	日期	備註
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes

參考資料

REF-1330

CVE --> CWE Mapping Guidance - Quick Tips
MITRE.
https://cwe.mitre.org/documents/cwe_usage/quick_tips.html