CWE-1076: Insufficient Adherence to Expected Conventions
Description
The product's architecture, source code, design, documentation, or other artifact does not follow required conventions.
- Abstraction
- ClassAn abstract weakness, independent of any specific language or technology.
- Likelihood of exploit
- Not rated by MITRE
- Status
- Incomplete
Common consequences
- Other
Reduce Maintainability
This issue makes it more difficult to maintain the product, which indirectly affects security by making it more difficult or time-consuming to find and/or fix vulnerabilities. It also might make it easier to introduce vulnerabilities.
Related weaknesses
Parent weaknesses
Child weaknesses
- CWE-586Explicit Call to Finalize()
- CWE-594J2EE Framework: Saving Unserializable Objects to Disk
- CWE-1045Parent Class with a Virtual Destructor and a Child Class without a Virtual Destructor
- CWE-1070Serializable Data Element Containing non-Serializable Item Elements
- CWE-1078Inappropriate Source Code Style or Formatting
- CWE-1079Parent Class without Virtual Destructor Method
- CWE-1082Class Instance Self Destruction Control Element
- CWE-1087Class with Virtual Method without a Virtual Destructor
- CWE-1091Use of Object without Invoking Destructor Method
- CWE-1097Persistent Storable Data Element without Associated Comparison Control Element
- CWE-1098Data Element containing Pointer Item without Proper Copy Control Element
- CWE-1108Excessive Reliance on Global Variables
CAPEC attack patterns that exploit it
CWE 4.20 links no CAPEC attack pattern to this weakness.