2329
Nature Type ID Name Page
HasMember 488 Exposure of Data Element to Wrong Session 700 1169
HasMember 489 Active Debug Code 700 1171
HasMember 491 Public cloneable() Method Without Final ('Object Hijack') 700 1174
HasMember 492 Use of Inner Class Containing Sensitive Data 700 1175
HasMember 493 Critical Public Variable Without Final Modifier 700 1182
HasMember 495 Private Data Structure Returned From A Public Method 700 1189
HasMember 496 Public Data Assigned to Private Array-Typed Field 700 1192
HasMember 497 Exposure of Sensitive System Information to an
Unauthorized Control Sphere
700 1193
HasMember 501 Trust Boundary Violation 700 1203
Notes
Other
The "encapsulation" term is used in multiple ways. Within some security sources, the term is
used to describe the establishment of boundaries between different control spheres. Within
general computing circles, it is more about hiding implementation details and maintainability
than security. Even within the security usage, there is also a question of whether "encapsulation"
encompasses the entire range of security problems.
References
[REF-6]Katrina Tsipenyuk, Brian Chess and Gary McGraw. "Seven Pernicious Kingdoms: A
Taxonomy of Software Security Errors". NIST Workshop on Software Security Assurance Tools
Techniques and Metrics. 2005 November 7. NIST. < https://samate.nist.gov/SSATTM_Content/
papers/Seven%20Pernicious%20Kingdoms%20-%20Taxonomy%20of%20Sw%20Security
%20Errors%20-%20Tsipenyuk%20-%20Chess%20-%20McGraw.pdf >.
Category-557: Concurrency Issues
Category ID : 557
Summary
Weaknesses in this category are related to concurrent use of shared resources.
Membership
Nature Type ID Name Page
MemberOf 699 Software Development 699 2555
HasMember 364 Signal Handler Race Condition 699 899
HasMember 366 Race Condition within a Thread 699 904
HasMember 367 Time-of-check Time-of-use (TOCTOU) Race Condition 699 906
HasMember 368 Context Switching Race Condition 699 912
HasMember 386 Symbolic Name not Mapping to Correct Object 699 942
HasMember 421 Race Condition During Access to Alternate Channel 699 1020
HasMember 663 Use of a Non-reentrant Function in a Concurrent
Context
699 1452
HasMember 820 Missing Synchronization 699 1720
HasMember 821 Incorrect Synchronization 699 1722
HasMember 1058 Invokable Control Element in Multi-Thread Context with
non-Final Static Storable or Member Element
699 1893
HasMember 1322 Use of Blocking Code in Single-threaded, Non-blocking
Context
699 2207
CWE Version 4.14
CWE-569: Expression Issues
CWE-569: Expression Issues