COMMON WEAKNESS ENUMERATIONDraft

CWE-684

Incorrect Provision of Specified Functionality

The code does not function according to its published specifications, potentially leading to incorrect usage.

Abstraction

Class

Structure

Simple

Likelihood of Exploit

Medium

Understand the problem

What is the problem?

The code does not function according to its published specifications, potentially leading to incorrect usage.

Extended description

When providing functionality to an external party, it is important that the product behaves in accordance with the details specified. When requirements of nuances are not documented, the functionality may produce unintended behaviors for the caller, possibly leading to an exploitable state.

Root cause

How and when does the problem arise?

Lifecycle phase

Implementation

Risk

What does successful exploitation lead to?

Quality Degradation

Affected security scopes: Other

Defence

How is it prevented and fixed?

Implementation

Implementation-phase defence

Detail
Ensure that your code strictly conforms to specifications.
CWE-684: Common Weakness Enumeration Entry CWE-684 · DayBreach Sözlük · DayBreach