Insufficient Technical Documentation
CWE-1059
The product does not contain sufficient technical or engineering documentation (whether on paper or in electronic form) that contains descriptions of all of the relevant software/hardware elements of the product.
We track 3 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.7.
How this weakness is prevented
- Documentation Architecture and Design: Ensure that design documentation is detailed enough to allow for post-manufacturing verification.
Latest Insufficient Technical Documentation vulnerabilities
- 7.1 High severity
hulumi: Insufficient Technical Documentation
Hulumi is an open-source toolkit that ships secure-by-default cloud and platform infrastructure components for Pulumi. Prior to version 1.4.0, consumers using AccountFoundation could ship an AWS account whose CloudTrail / Config audit logs were deletable by an
- 9.1 Critical severity
Apache Tomcat: Insufficient Technical Documentation
Insufficient Technical Documentation vulnerability in Apache Tomcat since the requirements to securely configure the EncryptInterceptor were not clearly documented. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.23, from 10.1.0-M1 through 10.1.5
- 9.8 Critical severity
Bus module CPX-E-EP: Insufficient Technical Documentation
In multiple products by Festo a remote unauthenticated attacker could use functions of an undocumented protocol which could lead to a complete loss of confidentiality, integrity and availability.