The product uses a dedicated, central data manager component as required by design, but it contains code that performs data-access operations that do not use this data manager.
This issue can make the product perform more slowly than intended, since the intended central data manager may have been explicitly optimized for performance or other quality characteristics. If the relevant code is reachable by an attacker, then this performance problem might introduce a vulnerability.
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| ChildOf | Allowed-with-Review | C | 1061 | Insufficient Encapsulation |
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | C | 1132 | CISQ Quality Measures (2016) - Performance Efficiency |
| MemberOf | Prohibited | C | 1227 | Encapsulation Issues |
| MemberOf | Prohibited | C | 1309 | CISQ Quality Measures - Efficiency |
| MemberOf | Prohibited | C | 1412 | Comprehensive Categorization: Poor Coding Practices |
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | BS | BOSS-313 | Reduce Performance (impact) |
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | C | 1227 | Encapsulation Issues |
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | C | 1309 | CISQ Quality Measures - Efficiency |
| Scope | Likelihood | Impact | Note |
|---|---|---|---|
| Other | N/A | Reduce Performance | N/A |
| Reference | Description |
|---|
| Ordinality | Description |
|---|---|
| Indirect | N/A |
This entry is primarily a quality issue with no direct security implications.
Look for weaknesses that are focused specifically on insecure behaviors that have more direct security implications.
| Taxonomy Name | Entry ID | Fit | Entry Name |
|---|---|---|---|
| OMG ASCPEM | ASCPEM-PRF-11 | N/A | N/A |
| ID | Name |
|---|