A class has an inheritance level that is too high, i.e., it has a large number of parent classes.
This issue makes it more difficult to understand and maintain the product, which indirectly affects security by making it more difficult or time-consuming to find and/or fix vulnerabilities. It also might make it easier to introduce vulnerabilities.
While the interpretation of "large number of parent classes" may vary for each product or developer, CISQ recommends a default maximum of 7 parent classes.
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| ChildOf | Allowed-with-Review | C | 1093 | Excessively Complex Data Representation |
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | C | 1130 | CISQ Quality Measures (2016) - Maintainability |
| MemberOf | Prohibited | C | 1226 | Complexity Issues |
| MemberOf | Prohibited | C | 1307 | CISQ Quality Measures - Maintainability |
| MemberOf | Prohibited | C | 1412 | Comprehensive Categorization: Poor Coding Practices |
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | BS | BOSS-310 | Reduce Maintainability (impact) |
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | C | 1307 | CISQ Quality Measures - Maintainability |
| Nature | Mapping | Type | ID | Name |
|---|---|---|---|---|
| MemberOf | Prohibited | C | 1226 | Complexity Issues |
| Scope | Likelihood | Impact | Note |
|---|---|---|---|
| Other | N/A | Reduce Maintainability | N/A |
| Reference | Description |
|---|
| Ordinality | Description |
|---|---|
| Indirect | N/A |
This entry is primarily a quality issue with no direct security implications.
Look for weaknesses that are focused specifically on insecure behaviors that have more direct security implications.
| Taxonomy Name | Entry ID | Fit | Entry Name |
|---|---|---|---|
| OMG ASCMM | ASCMM-MNT-17 | N/A | N/A |
| ID | Name |
|---|