Software Development

Opis

This view organizes weaknesses around concepts that are frequently used or encountered in software development. This includes all aspects of the software development lifecycle including both architecture and implementation. Accordingly, this view can align closely with the perspectives of architects, developers, educators, and assessment vendors. It provides a variety of categories that are intended to simplify navigation, browsing, and mapping.

Wpisy w tej grupie

• CWE-1228 API / Function Errors
• CWE-1210 Audit / Logging Errors
• CWE-1211 Authentication Errors
• CWE-1212 Authorization Errors
• CWE-1006 Bad Coding Practices
• CWE-438 Behavioral Problems
• CWE-840 Business Logic Errors
• CWE-417 Communication Channel Errors
• CWE-1226 Complexity Issues
• CWE-557 Concurrency Issues
• CWE-255 Credentials Management Errors
• CWE-310 Cryptographic Issues
• CWE-320 Key Management Errors
• CWE-1214 Data Integrity Issues
• CWE-19 Data Processing Errors
• CWE-137 Data Neutralization Issues
• CWE-1225 Documentation Issues
• CWE-1219 File Handling Issues
• CWE-1227 Encapsulation Issues
• CWE-389 Error Conditions, Return Values, Status Codes
• CWE-569 Expression Issues
• CWE-429 Handler Errors
• CWE-199 Information Management Errors
• CWE-452 Initialization and Cleanup Errors
• CWE-1215 Data Validation Issues
• CWE-1216 Lockout Mechanism Errors
• CWE-1218 Memory Buffer Errors
• CWE-189 Numeric Errors
• CWE-275 Permission Issues
• CWE-465 Pointer Issues
• CWE-265 Privilege Issues
• CWE-1213 Random Number Issues
• CWE-411 Resource Locking Problems
• CWE-399 Resource Management Errors
• CWE-387 Signal Errors
• CWE-371 State Issues
• CWE-133 String Errors
• CWE-136 Type Errors
• CWE-355 User Interface Security Issues
• CWE-1217 User Session Errors

Uwagi

The top level categories in this view represent commonly understood areas/terms within software development, and are meant to aid the user in identifying potential related weaknesses. It is possible for the same weakness to exist within multiple different categories.

This view attempts to present weaknesses in a simple and intuitive way. As such it targets a single level of abstraction. It is important to realize that not every CWE will be represented in this view. High-level class weaknesses and low-level variant weaknesses are mostly ignored. However, by exploring the weaknesses that are included, and following the defined relationships, one can find these higher and lower level weaknesses.