CWE-710: Improper Adherence to Coding Standards
Description
The product does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities.
- Abstraction
- PillarThe most abstract kind of weakness: a theme that groups classes.
- Likelihood of exploit
- Not rated by MITRE
- Status
- Incomplete
Common consequences
- Other
Other
Potential mitigations
- Policy
Select and require coding standards. Ensure that they include security concerns.
- Implementation
Closely follow coding standards, possibly enforcing them upon checkin of the code into a source control system or with periodic analyses.
Related weaknesses
Child weaknesses
- CWE-476NULL Pointer Dereference
- CWE-477Use of Obsolete Function
- CWE-484Omitted Break Statement in Switch
- CWE-489Active Debug Code
- CWE-570Expression is Always False
- CWE-571Expression is Always True
- CWE-573Improper Following of Specification by Caller
- CWE-657Violation of Secure Design Principles
- CWE-684Incorrect Provision of Specified Functionality
- CWE-758Reliance on Undefined, Unspecified, or Implementation-Defined Behavior
- CWE-1041Use of Redundant Code
- CWE-1044Architecture with Number of Horizontal Layers Outside of Expected Range
- CWE-1048Invokable Control Element with Large Number of Outward Calls
- CWE-1059Insufficient Technical Documentation
- CWE-1061Insufficient Encapsulation
- CWE-1065Runtime Resource Management Control Element in a Component Built to Run on Application Servers
- CWE-1066Missing Serialization Control Element
- CWE-1068Inconsistency Between Implementation and Documented Design
- CWE-1076Insufficient Adherence to Expected Conventions
- CWE-1092Use of Same Invokable Control Element in Multiple Architectural Layers
- CWE-1093Excessively Complex Data Representation
- CWE-1101Reliance on Runtime Component in Generated Code
- CWE-1120Excessive Code Complexity
- CWE-1126Declaration of Variable with Unnecessarily Wide Scope
- CWE-1127Compilation with Insufficient Warnings or Errors
- CWE-1164Irrelevant Code
- CWE-1177Use of Prohibited Code
- CWE-1209Failure to Disable Reserved Bits
- CWE-1357Reliance on Insufficiently Trustworthy Component
CAPEC attack patterns that exploit it
CWE 4.20 links no CAPEC attack pattern to this weakness.