CWE-1097 不带关联比较控制元素的持久可存储数据元素

Persistent Storable Data Element without Associated Comparison Control Element

结构: Simple

Abstraction: Base

状态: Incomplete

被利用可能性: unkown

基本描述

The software uses a storable data element that does not have
all of the associated functions or methods that are necessary to support
comparison.

扩展描述

For example, with Java, a class that is made persistent requires both hashCode() and equals() methods to be defined.

This issue can prevent the software from running reliably, due to incorrect or unexpected comparison results. If the relevant code is reachable by an attacker, then this reliability problem might introduce a vulnerability.

相关缺陷

• cwe_Nature: ChildOf cwe_CWE_ID: 1076 cwe_View_ID: 1000 cwe_Ordinal: Primary

• cwe_Nature: ChildOf cwe_CWE_ID: 1076 cwe_View_ID: 699 cwe_Ordinal: Primary

常见的影响

分类映射

引用

• REF-961 Automated Source Code Reliability Measure (ASCRM)

文章来源于互联网:scap中文网