CWE-344 在动态变化上下文中使用不变值

Use of Invariant Value in Dynamically Changing Context

结构: Simple

Abstraction: Base

状态: Draft

被利用可能性: unkown

基本描述

The product uses a constant value, name, or reference, but this value can (or should) vary across different environments.

相关缺陷

• cwe_Nature: ChildOf cwe_CWE_ID: 330 cwe_View_ID: 1000 cwe_Ordinal: Primary

• cwe_Nature: ChildOf cwe_CWE_ID: 330 cwe_View_ID: 699 cwe_Ordinal: Primary

适用平台

Language: {'cwe_Class': 'Language-Independent', 'cwe_Prevalence': 'Undetermined'}

常见的影响

范围	影响	注释
Other	Varies by Context

分析过的案例

标识	说明	链接

Notes

分类映射

映射的分类名	ImNode ID	Fit	Mapped Node Name
PLOVER			Static Value in Unpredictable Context

引用

• REF-267 SECURITY REQUIREMENTS FOR CRYPTOGRAPHIC MODULES

文章来源于互联网:scap中文网