Read Time:10 Second
Description
The software contains a class with inheritance from more than
one concrete class.
Modes of Introduction:
Related Weaknesses
Consequences
Other: Reduce Maintainability
Category Archives: CWE
CWE-1056 – Invokable Control Element with Variadic Parameters
Read Time:12 Second
Description
A named-callable or method control element has a signature that
supports a variable (variadic) number of parameters or arguments.
Modes of Introduction:
Related Weaknesses
Consequences
Other: Reduce Reliability
Potential Mitigations
CVE References
CWE-1057 – Data Access Operations Outside of Expected Data Manager Component
Read Time:15 Second
Description
The software uses a dedicated, central data manager component as required by design, but it contains code that performs data-access operations that do not use this data manager.
Modes of Introduction:
Related Weaknesses
Consequences
Other: Reduce Performance
Potential Mitigations
CVE References
CWE-1058 – Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element
Read Time:15 Second
Description
The code contains a function or method that
operates in a multi-threaded environment but owns an unsafe non-final
static storable or member data element.
Modes of Introduction:
Related Weaknesses
Consequences
Other: Reduce Reliability
Potential Mitigations
CVE References
CWE-1059 – Insufficient Technical Documentation
Read Time:33 Second
Description
The product does not contain sufficient
technical or engineering documentation (whether on paper or
in electronic form) that contains descriptions of all the
relevant software/hardware elements of the product, such as
its usage, structure, architectural components, interfaces, design, implementation,
configuration, operation, etc.
Modes of Introduction:
– Architecture and Design
Related Weaknesses
Consequences
Other: Varies by Context, Hide Activities, Reduce Reliability, Quality Degradation, Reduce Maintainability
Without a method of verification, one cannot be sure that everything only functions as expected.
Potential Mitigations
Phase: Documentation, Architecture and Design
Description:
Ensure that design documentation is detailed enough to allow for post-manufacturing verification.
CVE References
CWE-106 – Struts: Plug-in Framework not in Use
Read Time:25 Second
Description
When an application does not use an input validation framework such as the Struts Validator, there is a greater risk of introducing weaknesses related to insufficient input validation.
Modes of Introduction:
– Implementation
Related Weaknesses
Consequences
Integrity: Unexpected State
Potential Mitigations
Phase: Architecture and Design
Description:
Use an input validation framework such as Struts.
Phase: Architecture and Design
Description:
Use an input validation framework such as Struts.
Phase: Implementation
Description:
Phase: Implementation
Description:
CVE References
CWE-1060 – Excessive Number of Inefficient Server-Side Data Accesses
Read Time:11 Second
Description
The software performs too many data queries without using efficient data processing functionality such as stored procedures.
Modes of Introduction:
Related Weaknesses
Consequences
Other: Reduce Performance
Potential Mitigations
CVE References
CWE-1061 – Insufficient Encapsulation
Read Time:17 Second
Description
The software does not sufficiently hide the internal representation and implementation details of data or methods, which might allow external components or modules to modify data unexpectedly, invoke unexpected functionality, or introduce dependencies that the programmer did not intend.
Modes of Introduction:
Related Weaknesses
Consequences
Potential Mitigations
CVE References
CWE-1062 – Parent Class with References to Child Class
Read Time:11 Second
Description
The code has a parent class that contains references to a child class, its methods, or its members.
Modes of Introduction:
Related Weaknesses
Consequences
Other: Reduce Reliability
Potential Mitigations
CVE References
CWE-1063 – Creation of Class Instance within a Static Code Block
Read Time:9 Second
Description
A static code block creates an instance of a class.
Modes of Introduction:
Related Weaknesses
Consequences
Other: Reduce Performance