CWE-398
Grouping Prohibited7PK - Code Quality
Status: Draft
This category represents one of the phyla in the Seven Pernicious Kingdoms vulnerability classification. It includes weaknesses that do not directly introduce a weakness or vulnerability, but indicate that the product has not been carefully developed or maintained. According to the authors of the Seven Pernicious Kingdoms, "Poor code quality leads to unpredictable behavior. From a user's perspective that often manifests itself as poor usability. For an adversary it provides an opportunity to stress the system in unexpected ways."
Grouping entries organize the catalogue and should not be used to map the root cause of a vulnerability.
Mapping guidance
This entry is a Grouping. Using groupings for mapping has been discouraged since 2019. They are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
See member weaknesses of this category.
Relationships and members
Content history
updated Time_of_Introduction
updated Description, Relationships, Taxonomy_Mappings
updated Relationships
updated Relationships
updated Common_Consequences
updated Common_Consequences
updated Relationships
updated Detection_Factors, Relationships
updated Relationships
updated Relationships
updated Relationships
updated Common_Consequences, Description, Detection_Factors, Name, References, Relationships, Taxonomy_Mappings, Time_of_Introduction, Type
updated Relationships
updated References
updated Mapping_Notes
updated Mapping_Notes
updated Mapping_Notes, References, Type
0 vulnerabilities reference this CWE, most recent first.
No vulnerabilities reference this CWE.
No mitigation information available for this CWE.
No CAPEC attack patterns related to this CWE.