12
References
[REF-961]Object Management Group (OMG). "Automated Source Code Reliability Measure
(ASCRM)". 2016 January. < http://www.omg.org/spec/ASCRM/1.0/ >.
CWE-1097: Persistent Storable Data Element without Associated Comparison
Control Element
Weakness ID : 1097
Structure : Simple
Abstraction : Base
Description
The product uses a storable data element that does not have all of the associated functions or
methods that are necessary to support comparison.
Extended Description
For example, with Java, a class that is made persistent requires both hashCode() and equals()
methods to be defined.
This issue can prevent the product from running reliably, due to incorrect or unexpected
comparison results. If the relevant code is reachable by an attacker, then this reliability problem
might introduce a vulnerability.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 1076 Insufficient Adherence to Expected Conventions 1916
Relevant to the view "CISQ Quality Measures (2020)" (CWE-1305)
CWE Version 4.14
CWE-1098: Data Element containing Pointer Item without Proper Copy Control Element
CWE-1098: Data Element containing Pointer
Item without Proper Copy Control Element 1938
Nature Type ID Name Page
ChildOf 595 Comparison of Object References Instead of Object
Contents