CWE•Class•Incomplete•2 recent CVEs
CWE-1059Insufficient Technical Documentation
Description
The product does not contain sufficient technical or engineering documentation (whether on paper or in electronic form) that contains descriptions of all the relevant software/hardware elements of the product, such as its usage, structure, architectural components, interfaces, design, implementation, configuration, operation, etc.
[object Object]
Common consequences
- Other→Varies by Context,Hide Activities,Reduce Reliability,Quality Degradation,Reduce MaintainabilityWithout a method of verification, one cannot be sure that everything only functions as expected.
Potential mitigations
- Documentation,Architecture and DesignEnsure that design documentation is detailed enough to allow for post-manufacturing verification.