925
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
CLASP Mutable object returned
The CERT Oracle Secure
Coding Standard for Java
(2011)
OBJ04-J Provide mutable classes with copy
functionality to safely allow passing
instances to untrusted code
The CERT Oracle Secure
Coding Standard for Java
(2011)
OBJ05-J Defensively copy private mutable
class members before returning their
references
SEI CERT Perl Coding
Standard
EXP34-
PL
Imprecise Do not modify $_ in list or sorting
functions
Software Fault Patterns SFP23 Exposed Data
References
[REF-18]Secure Software, Inc.. "The CLASP Application Security Process". 2005. < https://
cwe.mitre.org/documents/sources/TheCLASPApplicationSecurityProcess.pdf >.
CWE-377: Insecure Temporary File
Weakness ID : 377
Structure : Simple
Abstraction : Class
Description
Creating and using insecure temporary files can leave application and system data vulnerable to
attack.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 668 Exposure of Resource to Wrong Sphere 1469
ParentOf 378 Creation of Temporary File With Insecure Permissions 928
ParentOf 379 Creation of Temporary File in Directory with Insecure
Permissions