942
Notes
Maintenance
As of CWE 4.9, members of the CWE Hardware SIG are working to improve CWE's coverage of
transient execution weaknesses, which include issues related to Spectre, Meltdown, and other
attacks that create or exploit covert channels. As a result of that work, this entry might change in
CWE 4.10.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
Landwehr Timing
CLASP Covert Timing Channel
Related Attack Patterns
CAPEC-ID Attack Pattern Name
462 Cross-Domain Search Timing
References
[REF-18]Secure Software, Inc.. "The CLASP Application Security Process". 2005. < https://
cwe.mitre.org/documents/sources/TheCLASPApplicationSecurityProcess.pdf >.
CWE-386: Symbolic Name not Mapping to Correct Object
Weakness ID : 386
Structure : Simple
Abstraction : Base
Description
A constant symbolic reference to an object is used, even though the reference can resolve to a
different object over time.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 706 Use of Incorrectly-Resolved Name or Reference 1544
PeerOf 367 Time-of-check Time-of-use (TOCTOU) Race Condition 906
PeerOf 486 Comparison of Classes by Name 1164
PeerOf 610 Externally Controlled Reference to a Resource in Another
Sphere