Tag Archives: Incorrect Provision of Specified Functionality

CWE-684 – Incorrect Provision of Specified Functionality

Read Time:27 Second

Description

The code does not function according to its published specifications, potentially leading to incorrect usage.

When providing functionality to an external party, it is important that the software behaves in accordance with the details specified. When requirements of nuances are not documented, the functionality may produce unintended behaviors for the caller, possibly leading to an exploitable state.

Modes of Introduction:

– Implementation

 

 

Related Weaknesses

CWE-710

 

Consequences

Other: Quality Degradation

 

Potential Mitigations

Phase: Implementation

Description: 

Ensure that your code strictly conforms to specifications.

CVE References