CWE-684 — Incorrect Provision of Specified Functionality
CWE-684: Incorrect Provision of Specified Functionality
MITRE CWE weakness
| Kind | Weakness |
| Abstraction | Class |
| Status | Draft |
| Likelihood of exploit | — |
Description
The code does not function according to its published specifications, potentially leading to incorrect usage.
When providing functionality to an external party, it is important that the product behaves in accordance with the details specified. When requirements of nuances are not documented, the functionality may produce unintended behaviors for the caller, possibly leading to an exploitable state.
Common consequences
- Other: Quality Degradation
Mitigations
Implementation — Ensure that your code strictly conforms to specifications.
References
- CWE page: https://cwe.mitre.org/data/definitions/684.html
- CWE list: https://cwe.mitre.org/data/index.html