Persistent Storable Data Element without Associated Comparison Control Element

Opis

The product uses a storable data element that does not have all of the associated functions or methods that are necessary to support comparison.

Skutki

• Other

  Reduce Reliability

  This issue can prevent the product from running reliably, due to incorrect or unexpected comparison results. If the relevant code is reachable by an attacker, then this reliability problem might introduce a vulnerability.

Słabość nadrzędna

• CWE-1076 Insufficient Adherence to Expected Conventions
• CWE-595 Comparison of Object References Instead of Object Contents

Kiedy powstaje

• Implementation

Dotyczy

Not Language-Specific

Źródła

1. Automated Source Code Reliability Measure (ASCRM) — Object Management Group (OMG), ASCRM-RLB-4, 2016