CWE-1112: Incomplete Documentation of Program Execution

BaseIncomplete

The document does not fully define all mechanisms that are used to control or influence how product-specific programs are executed.

View on MITRE
Back to CWE Lookup

Extended Description

This includes environmental variables, configuration files, registry keys, command-line switches or options, or system settings.

Technical Details

Structure
Simple

Applicable To

Languages
Platforms

Frequently Asked Questions

What is CWE-1112: Incomplete Documentation of Program Execution?+

CWE-1112: Incomplete Documentation of Program Execution is a Common Weakness Enumeration (CWE) entry maintained by MITRE. The document does not fully define all mechanisms that are used to control or influence how product-specific programs are executed. This includes environmental variables, configuration files, registry keys, command-line switches or options, or system settings.

What is the difference between a CWE and a CVE?+

A CWE (Common Weakness Enumeration) like CWE-1112 describes a category of software weakness — the underlying flaw type. A CVE (Common Vulnerabilities and Exposures) identifies a specific, real-world vulnerability in a particular product. In short, a CWE is the kind of mistake, and a CVE is an instance of that mistake being found in software.

Learn More