CWE-691 不充分的控制流管理

Insufficient Control Flow Management

结构: Simple

Abstraction: Class

状态: Draft

被利用可能性: unkown

基本描述

The code does not sufficiently manage its control flow during execution, creating conditions in which the control flow can be modified in unexpected ways.

适用平台

Language: {'cwe_Class': 'Language-Independent', 'cwe_Prevalence': 'Undetermined'}

常见的影响

范围	影响	注释
Other	Alter Execution Logic

Notes

分类映射

映射的分类名	ImNode ID	Fit	Mapped Node Name
WASC	40		Insufficient Process Validation

相关攻击模式

• CAPEC-29

文章来源于互联网:scap中文网