1974
Nature Type ID Name Page
MemberOf 1412 Comprehensive Categorization: Poor Coding Practices 1400 2538
References
[REF-1009]Tim Rains. "Microsoft's Free Security Tools - banned.h". 2012 August 0. < https://
www.microsoft.com/en-us/security/blog/2012/08/30/microsofts-free-security-tools-banned-h/
>.2023-04-07.
[REF-1010]Michael Howard. "Microsoft's Free Security Tools - banned.h". 2011 June. < https://
www.microsoft.com/en-us/security/blog/2012/08/30/microsofts-free-security-tools-banned-h/
>.2023-04-07.
CWE-1188: Initialization of a Resource with an Insecure Default
Weakness ID : 1188
Structure : Simple
Abstraction : Base
Description
The product initializes or sets a resource with a default that is intended to be changed by the
administrator, but the default is not secure.
Extended Description
Developers often choose default values that leave the product as open and easy to use as
possible out-of-the-box, under the assumption that the administrator can (or should) change the
default value. However, this ease-of-use comes at a cost when the default is insecure and the
administrator does not change it.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 1419 Incorrect Initialization of Resource 2280
ParentOf 453 Insecure Default Variable Initialization 1083
Relevant to the view "Weaknesses for Simplified Mapping of Published
Vulnerabilities" (CWE-1003)
Nature Type ID Name Page
ChildOf 665 Improper Initialization 1456
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 399 Resource Management Errors 2324
MemberOf 452 Initialization and Cleanup Errors 2327
Weakness Ordinalities
Primary :
Demonstrative Examples
Example 1:
CWE Version 4.14
CWE-1188: Initialization of a Resource with an Insecure Default
CWE-1188: Initialization of a Resource with an Insecure Default