2320
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Key Management Errors
Notes
Maintenance
This entry heavily overlaps other categories and has been marked obsolete.
Category-355: User Interface Security Issues
Category ID : 355
Summary
Weaknesses in this category are related to or introduced in the User Interface (UI).
Membership
Nature Type ID Name Page
MemberOf 699 Software Development 699 2555
HasMember 356 Product UI does not Warn User of Unsafe Actions 699 879
HasMember 357 Insufficient UI Warning of Dangerous Operations 699 880
HasMember 447 Unimplemented or Unsupported Feature in UI 699 1075
HasMember 448 Obsolete Feature in UI 699 1076
HasMember 449 The UI Performs the Wrong Action 699 1077
HasMember 549 Missing Password Field Masking 699 1262
HasMember 1007 Insufficient Visual Distinction of Homoglyphs Presented
to User
699 1857
HasMember 1021 Improper Restriction of Rendered UI Layers or Frames 699 1860
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER (UI) User Interface Errors
Notes
Research Gap
User interface errors that are relevant to security have not been studied at a high level.
Category-361: 7PK - Time and State
Category ID : 361
Summary
This category represents one of the phyla in the Seven Pernicious Kingdoms vulnerability
classification. It includes weaknesses related to the improper management of time and state
in an environment that supports simultaneous or near-simultaneous computation by multiple
systems, processes, or threads. According to the authors of the Seven Pernicious Kingdoms,
"Distributed computation is about time and state. That is, in order for more than one component to
communicate, state must be shared, and all that takes time. Most programmers anthropomorphize
their work. They think about one thread of control carrying out the entire program in the same way
they would if they had to do the job themselves. Modern computers, however, switch between
tasks very quickly, and in multi-core, multi-CPU, or distributed systems, two events may take
CWE Version 4.14
CWE-371: State Issues
CWE-371: State Issues