1298
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 854 The CERT Oracle Secure Coding Standard for Java
(2011) Chapter 11 - Thread APIs (THI)
844 2367
MemberOf 1001 SFP Secondary Cluster: Use of an Improper API 888 2420
MemberOf 1144 SEI CERT Oracle Secure Coding Standard for Java -
Guidelines 10. Thread APIs (THI)
1133 2449
MemberOf 1401 Comprehensive Categorization: Concurrency 1400 2526
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
The CERT Oracle Secure
Coding Standard for Java
(2011)
THI00-J Do not invoke Thread.run()
Software Fault Patterns SFP3 Use of an improper API
CWE-573: Improper Following of Specification by Caller
Weakness ID : 573
Structure : Simple
Abstraction : Class
Description
The product does not follow or incorrectly follows the specifications as required by the
implementation language, environment, framework, protocol, or platform.
Extended Description
When leveraging external functionality, such as an API, it is important that the caller does so in
accordance with the requirements of the external functionality or else unintended behaviors may
result, possibly leaving the system vulnerable to any number of exploits.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 710 Improper Adherence to Coding Standards 1549
ParentOf 103 Struts: Incomplete validate() Method Definition 248
ParentOf 104 Struts: Form Bean Does Not Extend Validation Class 251
ParentOf 243 Creation of chroot Jail Without Changing Working Directory 589
ParentOf 253 Incorrect Check of Function Return Value 613
ParentOf 296 Improper Following of a Certificate's Chain of Trust 719
ParentOf 304 Missing Critical Step in Authentication 738
ParentOf 325 Missing Cryptographic Step 794
ParentOf 329 Generation of Predictable IV with CBC Mode 811
ParentOf 358 Improperly Implemented Security Check for Standard 881
CWE Version 4.14
CWE-573: Improper Following of Specification by Caller
CWE-573: Improper Following of Specification by Caller