Weakness (CWE)
CWE-1059: Insufficient Technical Documentation
Class Incomplete Mapping prohibited
The product does not contain sufficient
technical or engineering documentation (whether on paper or
in electronic form) that contains descriptions of all of the
relevant software/hardware elements of the product.
How to prevent it (1 mitigation)
-
Documentation, Architecture and Design
Ensure that design documentation is detailed enough to allow for post-manufacturing verification.
Source: MITRE CWE-1059
1 result · Clear filters · Feed
-
High 7.1
Hulumi: AccountFoundation audit-delivery S3 bucket could be silently weakened
Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, consumers using AccountFoundation could ship an AWS account whose CloudTrail / Config audit logs were deletable by a…