Description
The product does not contain sufficient
technical or engineering documentation (whether on paper or
in electronic form) that contains descriptions of all the
relevant software/hardware elements of the product, such as
its usage, structure, architectural components, interfaces, design, implementation,
configuration, operation, etc.
Modes of Introduction:
– Architecture and Design
Related Weaknesses
CWE-710
Consequences
Other: Varies by Context, Hide Activities, Reduce Reliability, Quality Degradation, Reduce Maintainability
Without a method of verification, one cannot be sure that everything only functions as expected.
Potential Mitigations
Phase: Documentation, Architecture and Design
Description:
Ensure that design documentation is detailed enough to allow for post-manufacturing verification.
CVE References
