primary.
A resultant weakness includes behaviors that either (a) add to the problem, (b) fail to
correct it, or (c) are only exposed because of the primary weakness. For example, a PHP
program might have a primary weakness that uses extract($_GET) to overwrite global