The code contains a member element that is declared as static (but not final), in which its parent class element is not a singleton class - that is, a class element that can be used only once in the 'to' association of a Create action.
This issue can make the product perform more slowly. If the relevant code is reachable by an attacker, then this performance problem might introduce a vulnerability.
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| ChildOf | Allowed-with-Review | C | 1176 | Inefficient CPU Computation |
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | C | 1132 | CISQ Quality Measures (2016) - Performance Efficiency |
| MemberOf | Prohibited | C | 1309 | CISQ Quality Measures - Efficiency |
| MemberOf | Prohibited | C | 1416 | Comprehensive Categorization: Resource Lifecycle Management |
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | BS | BOSS-313 | Reduce Performance (impact) |
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | C | 1309 | CISQ Quality Measures - Efficiency |
| Scope | Likelihood | Impact | Note |
|---|---|---|---|
| Other | N/A | Reduce Performance | N/A |
| Reference | Description |
|---|
| Ordinality | Description |
|---|---|
| Indirect | N/A |
This entry is primarily a quality issue with no direct security implications.
Look for weaknesses that are focused specifically on insecure behaviors that have more direct security implications.
| Taxonomy Name | Entry ID | Fit | Entry Name |
|---|---|---|---|
| OMG ASCPEM | ASCPEM-PRF-3 | N/A | N/A |
| ID | Name |
|---|