CWE-684: Incorrect Provision of Specified Functionality
Description
The code does not function according to its published specifications, potentially leading to incorrect usage.
When providing functionality to an external party, it is important that the product behaves in accordance with the details specified. When requirements of nuances are not documented, the functionality may produce unintended behaviors for the caller, possibly leading to an exploitable state.
- Abstraction
- ClassAn abstract weakness, independent of any specific language or technology.
- Likelihood of exploit
- Not rated by MITRE
- Status
- Draft
Common consequences
- Other
Quality Degradation
Potential mitigations
- Implementation
Ensure that your code strictly conforms to specifications.
Related weaknesses
Parent weaknesses
Child weaknesses
- CWE-392Missing Report of Error Condition
- CWE-393Return of Wrong Status Code
- CWE-440Expected Behavior Violation
- CWE-446UI Discrepancy for Security Feature
- CWE-451User Interface (UI) Misrepresentation of Critical Information
- CWE-912Hidden Functionality
- CWE-1245Improper Finite State Machines (FSMs) in Hardware Logic
CAPEC attack patterns that exploit it
CWE 4.20 links no CAPEC attack pattern to this weakness.