COMMON WEAKNESS ENUMERATIONIncomplete

CWE-710

Improper Adherence to Coding Standards

The product does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities.

Abstraction

Pillar

Structure

Simple

Likelihood of Exploit

Medium

Understand the problem

What is the problem?

The product does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities.

Root cause

How and when does the problem arise?

Lifecycle phase

Architecture and Design

Lifecycle phase

Implementation

Risk

What does successful exploitation lead to?

Other

Affected security scopes: Other

Defence

How is it prevented and fixed?

Policy

Policy aşaması savunması

Detail
Select and require coding standards. Ensure that they include security concerns.

Implementation

Implementation-phase defence

Detail
Closely follow coding standards, possibly enforcing them upon checkin of the code into a source control system or with periodic analyses.

Verification

How is it detected?

Automated Static Analysis

Automated tools can detect violations of many code standards.