1478
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 977 SFP Secondary Cluster: Design 888 2407
MemberOf 1003 Weaknesses for Simplified Mapping of Published
Vulnerabilities
1003 2576
MemberOf 1410 Comprehensive Categorization: Insufficient Control
Flow Management
1400 2536
Notes
Maintenance
This node could possibly be split into lower-level nodes. "Early Return" is for returning control to
the caller too soon (e.g., CWE-584). "Excess Return" is when control is returned too far up the
call stack (CWE-600, CWE-395). "Improper control limitation" occurs when the product maintains
control at a lower level of execution, when control should be returned "further" up the call stack
(CWE-455). "Incorrect syntax" covers code that's "just plain wrong" such as CWE-484 and
CWE-483.
CWE-671: Lack of Administrator Control over Security
Weakness ID : 671
Structure : Simple
Abstraction : Class
Description
The product uses security features in a way that prevents the product's administrator from tailoring
security settings to reflect the environment in which the product is being used. This introduces
resultant weaknesses or prevents it from operating at a level of security that is desired by the
administrator.
Extended Description
If the product's administrator does not have the ability to manage security-related decisions at all
times, then protecting the product from outside threats - including the product's developer - can
become impossible. For example, a hard-coded account name and password cannot be changed
by the administrator, thus exposing that product to attacks that the administrator can not prevent.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 657 Violation of Secure Design Principles 1446
ParentOf 447 Unimplemented or Unsupported Feature in UI 1075
ParentOf 798 Use of Hard-coded Credentials 1690
Relevant to the view "Architectural Concepts" (CWE-1008)
Nature Type ID Name Page
MemberOf 1011 Authorize Actors 2425
Common Consequences
CWE Version 4.14
CWE-672: Operation on a Resource after Expiration or Release
CWE-672: Operation on a Resource after Expiration or Release