1087
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 808 2010 Top 25 - Weaknesses On the Cusp 800 2355
MemberOf 884 CWE Cross-section 884 2567
MemberOf 994 SFP Secondary Cluster: Tainted Input to Variable 888 2417
MemberOf 1416 Comprehensive Categorization: Resource Lifecycle
Management
1400 2545
Notes
Relationship
Overlaps Missing variable initialization, especially in PHP.
Applicable Platform
This is often found in PHP due to register_globals and the common practice of storing library/
include files under the web document root so that they are available using a direct request.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER External initialization of trusted
variables or values
Software Fault Patterns SFP25 Tainted input to variable
CWE-455: Non-exit on Failed Initialization
Weakness ID : 455
Structure : Simple
Abstraction : Base
Description
The product does not exit or otherwise modify its operation when security-relevant errors occur
during initialization, such as when a configuration file has a format error or a hardware security
module (HSM) cannot be activated, which can cause the product to execute in a less secure
fashion than intended by the administrator.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 636 Not Failing Securely ('Failing Open') 1401
ChildOf 665 Improper Initialization 1456
ChildOf 705 Incorrect Control Flow Scoping 1542
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 452 Initialization and Cleanup Errors 2327
Applicable Platforms
CWE Version 4.14
CWE-455: Non-exit on Failed Initialization
CWE-455: Non-exit on Failed Initialization