OMG Specification

Automated Source Code Quality Measures — Closed Issues

Acronym: ASCQM
Issues Count: 83
Description: Issues resolved by a task force and approved by Board

Issues Summary

Key	Issue	Reported	Fixed	Disposition	Status
ASCQM-80	Appendix C CWE number changes	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-74	CWE-321	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-58	CWE-703 & CWE-908	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-54	CWE-1096	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-24	CWE-XXX	ASCQM 1.0b1	ASCQM 1.0	Closed; No Change	closed
ASCQM-178	Appendices designation	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-176	Section 3 changes	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-174	Retirement of previous specifications made obsolete by this specification	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-79	Missing dectection pattern scripts	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-78	Detection pattern section numbers	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-77	CWE-77	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-76	CWE-682	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-75	CWE-662	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-73	CWE-778	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-72	CWE-606	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-71	CWE-775	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-70	CWE-134	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-69	CWE-123	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-68	CWE-99	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-67	CWE 79	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-66	CWE-1098	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-65	CWE-1088	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-64	CWE-1087	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-63	CWE-1083	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-62	CWE-1082	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-60	CWE-1070	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-59	CWE-1066	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-55	CWE-457	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-53	CWE-1058	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-50	CWE-123	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-49	CWE-120	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-35	CWE-1042	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-20	CWE-1054	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-172	CWE URL references	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-169	CWE-908	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-158	Introduction to clause 8	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-61	CWE-1077	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-57	CWE-197	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-56	CWE-681	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-52	CWE-1097	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-51	CWE-562	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-48	CWE-119	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-47	CWE-1094	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-46	CWE-1091	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-45	CWE-1089	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-44	CWE-1073	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-43	CWE-1072	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-42	CWE-1067	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-41	CWE-1060	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-40	CWE-1057	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-39	CWE-1050	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-38	CWE-1049	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-37	CWE-1046	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-36	CWE-1043	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-34	CWE-1071	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-33	CWE-424	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-32	CWE-1093 --> 1121	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-31	CWE-1095	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-30	CWE-1090	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-29	CWE-1087	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-28	CWE-1086	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-27	CWE-1085	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-26	CWE-1084	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-25	CWE-1080	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-23	CWE-1079	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-22	CWE-1075	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-21	CWE-1074	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-19	CWE-1062	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-18	CWE-1055	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-17	CWE-1054	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-16	CWE-1052	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-15	CWE-1051	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-14	CWE-1048	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-13	CWE-1047	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-12	CWE-1045	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-11	CWE-1041	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-10	CWE-783	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-9	CWE-1081	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-8	CWE-1061	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-7	CWE-484	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-6	CWE-478	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-4	CWE-407	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed
ASCQM-1	Add 2 normative references	ASCQM 1.0b1	ASCQM 1.0	Resolved	closed

Issues Descriptions

Appendix C CWE number changes

Key: ASCQM-80
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
Change CWE numbers for 3 weaknesses listed in Appendix C
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 08:43 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
Appendix C CWE number changes

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-321

Key: ASCQM-74
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 07:52 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-321

Correct description from 321 in resolution proposal.
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-703 & CWE-908

Key: ASCQM-58
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 06:33 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-703

Separate dsciprtions for CWEs 703 and 908
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1096

Key: ASCQM-54
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 06:21 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1096

Correct CWE #
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-XXX

Key: ASCQM-24
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
duplicate issue --> discard
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 00:15 GMT
Disposition: Closed; No Change — ASCQM 1.0
Disposition Summary:
*No issue *

Mistaken entry, no reference to document
Updated: Tue, 8 Oct 2019 17:50 GMT

Appendices designation

Key: ASCQM-178
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
Appendices should all be labeled as (Normative) or (Informative).
A and B should be Informative.
Not sure about Appendix C (probably Normative) but it needs some explanation. It should also be referenced from Section 1.1 that explains that this spec supersedes the other 4.
Reported: ASCQM 1.0b1 — Thu, 13 Jun 2019 18:19 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
Appendices designation

Appendices should all be labeled as (Normative) or (Informative).
A and B should be Informative.
Not sure about Appendix C (probably Normative) but it needs some explanation. It should also be referenced from Section 1.1 that explains that this spec supersedes the other 4.
Updated: Tue, 8 Oct 2019 17:50 GMT

Section 3 changes

Key: ASCQM-176
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
Section 3 references XMI 2.4.1 but the XMI is for 2.5.1.
Likewise SMM 1.2 rather than SMM 1.0 is referenced in the XMI. The format of reference is inconsistent (the document number rather than the catalog page)
And in the same line KDM is referenced as both 1.3 and 1.4
And it makes no sense to reference the 4 specifications being superseded by this one! A normative reference is one that by reference forms part of the current specification.
The AFP spec seems to have been referenced twice.
Reported: ASCQM 1.0b1 — Thu, 13 Jun 2019 16:47 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
Section 3 changes

Section 3 references XMI 2.4.1 but the XMI is for 2.5.1.
Likewise SMM 1.2 rather than SMM 1.0 is referenced in the XMI. The format of reference is inconsistent (the document number rather than the catalog page)
And in the same line KDM is referenced as both 1.3 and 1.4
And it makes no sense to reference the 4 specifications being superseded by this one! A normative reference is one that by reference forms part of the current specification.
The AFP spec seems to have been referenced twice.
Updated: Tue, 8 Oct 2019 17:50 GMT

Retirement of previous specifications made obsolete by this specification

Key: ASCQM-174
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
Directions to retire the following OMG specifications:
• Automated Source Code Maintainability Measure (ASCMM) https://www.omg.org/spec/ASCMM/1.0/
• Automated Source Code Performance Efficiency Measure (ASCPEM) https://www.omg.org/spec/ASCPEM/1.0/
• Automated Source Code Reliability Measure (ASCRM) https://www.omg.org/spec/ASCRM/1.0/
• Automated Source Code Security Measure (ASCSM) https://www.omg.org/spec/ASCSM/1.0/
Reported: ASCQM 1.0b1 — Thu, 13 Jun 2019 14:43 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
Retirement of previous specifications made obsolete by this specification

retire or mark as obsolete the following specifications.
• Automated Source Code Maintainability Measure (ASCMM) https://www.omg.org/spec/ASCMM/1.0/
• Automated Source Code Performance Efficiency Measure (ASCPEM) https://www.omg.org/spec/ASCPEM/1.0/
• Automated Source Code Reliability Measure (ASCRM) https://www.omg.org/spec/ASCRM/1.0/
• Automated Source Code Security Measure (ASCSM) https://www.omg.org/spec/ASCSM/1.0/
Updated: Tue, 8 Oct 2019 17:50 GMT

Missing dectection pattern scripts

Key: ASCQM-79
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
Some detection pattern scripts that were fully specified in the XMI for detection patterns listed in section 7, were missing from section 8
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 08:36 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
Missing dectection pattern scripts

same
Updated: Tue, 8 Oct 2019 17:50 GMT

Detection pattern section numbers

Key: ASCQM-78
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
Correct misnumbering of 5 detection pattern section numbers
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 08:29 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
Detection pattern section numbers

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-77

Key: ASCQM-77
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
Add detection patterns
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 08:22 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-77

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-682

Key: ASCQM-76
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
Add detection patterns
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 08:10 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-682

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-662

Key: ASCQM-75
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
Add detection patterns and change contributing weaknesses from MNT-11 and MNT-12 to CWE-1058 and CWE-1096
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 08:08 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-662

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-778

Key: ASCQM-73
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 07:51 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-778

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-606

Key: ASCQM-72
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consisntency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 07:28 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-606

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-775

Key: ASCQM-71
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency and change from a parent weakness to a contributing weakness under CWE-404
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 07:23 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-775

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-134

Key: ASCQM-70
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 07:19 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-134

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-123

Key: ASCQM-69
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistenecy
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 07:17 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-123

SAME
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-99

Key: ASCQM-68
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 07:15 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-99

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE 79

Key: ASCQM-67
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 07:10 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-79

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1098

Key: ASCQM-66
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 07:08 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1098

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1088

Key: ASCQM-65
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 07:03 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1088

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1087

Key: ASCQM-64
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE coinsistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 07:00 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1087

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1083

Key: ASCQM-63
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 06:58 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1083

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1082

Key: ASCQM-62
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 06:55 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1082

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1070

Key: ASCQM-60
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 06:47 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1070

SAME
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1066

Key: ASCQM-59
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 06:44 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1066

SAME
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-457

Key: ASCQM-55
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE coinsistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 06:26 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-457

incorrect # in FTF Report
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1058

Key: ASCQM-53
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 06:17 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1058

incorrect version of textual description from CWE
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-123

Key: ASCQM-50
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 05:56 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-123

incorrect text in issue but not in spec docs.
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-120

Key: ASCQM-49
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 05:53 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-120

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1042

Key: ASCQM-35
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 01:27 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1042

edit revised text
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1054

Key: ASCQM-20
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 00:02 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1054

Cange title, enter text
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE URL references

Key: ASCQM-172
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
All CWE references listed as "www.omg.org/spec/" must be changed to be listed as "cwe.mitre.org/data/definitions/" and old CISQ identifiers removed now that all CISQ weaknesses have been assigned CWE #s and are included in the CWE repository. This is relevant to CWEs numbered above 1000.
Reported: ASCQM 1.0b1 — Thu, 13 Jun 2019 05:26 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE URL references

All CWE references listed as "www.omg.org/spec/" must be changed to be listed as "cwe.mitre.org/data/definitions/" and old CISQ identifiers removed now that all CISQ weaknesses have been assigned CWE #s and are included in the CWE repository. This is relevant to CWEs numbered above 1000.
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-908

Key: ASCQM-169
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
Separate descriptions for CWEs 703 and 908, correct 9008 in spec doc.
Reported: ASCQM 1.0b1 — Thu, 13 Jun 2019 04:41 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-908

Separate descriptions of CWEs 703 and 908. Correct 908 in spec doc page 28..
Updated: Tue, 8 Oct 2019 17:50 GMT

Introduction to clause 8

Key: ASCQM-158
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
Provide a section 8.1 that gives an introduction to detection patterns and put the detection patterns in clause 8.2
Reported: ASCQM 1.0b1 — Fri, 31 May 2019 06:56 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
Introduction to clause 8

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1077

Key: ASCQM-61
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 06:49 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1077

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-197

Key: ASCQM-57
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 06:32 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-197

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-681

Key: ASCQM-56
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 06:30 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-681

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1097

Key: ASCQM-52
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency and add as a contriibuting weakness under CWE-595
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 06:13 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1097

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-562

Key: ASCQM-51
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 06:07 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-562

SAME
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-119

Key: ASCQM-48
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 02:28 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-119

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1094

Key: ASCQM-47
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 02:01 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1094

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1091

Key: ASCQM-46
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 01:58 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1091

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1089

Key: ASCQM-45
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 01:55 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1089

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1073

Key: ASCQM-44
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 01:52 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1073

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1072

Key: ASCQM-43
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 01:50 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1072

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1067

Key: ASCQM-42
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 01:47 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1067

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1060

Key: ASCQM-41
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 01:39 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1060

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1057

Key: ASCQM-40
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 01:37 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1057

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1050

Key: ASCQM-39
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 01:35 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1050

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1049

Key: ASCQM-38
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 01:33 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1049

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1046

Key: ASCQM-37
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consiostency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 01:31 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1046

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1043

Key: ASCQM-36
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE cnosistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 01:28 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1043

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1071

Key: ASCQM-34
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
Eliminate CWE-1071
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 01:25 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1071

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-424

Key: ASCQM-33
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
additional explanation
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 01:22 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-424

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1093 --> 1121

Key: ASCQM-32
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency and remove as a child under CWE-407 and create as a parent
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 00:54 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1093 --> 1121

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1095

Key: ASCQM-31
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 00:50 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1095

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1090

Key: ASCQM-30
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 00:47 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1090

SAME
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1087

Key: ASCQM-29
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 00:45 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1087

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1086

Key: ASCQM-28
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 00:42 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1086

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1085

Key: ASCQM-27
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 00:34 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1085

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1084

Key: ASCQM-26
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 00:27 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1084

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1080

Key: ASCQM-25
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 00:18 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1080

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1079

Key: ASCQM-23
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 00:14 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1079

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1075

Key: ASCQM-22
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 00:06 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1075

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1074

Key: ASCQM-21
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Tue, 28 May 2019 00:04 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1074

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1062

Key: ASCQM-19
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Mon, 27 May 2019 23:59 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1062

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1055

Key: ASCQM-18
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE coinsistency
Reported: ASCQM 1.0b1 — Mon, 27 May 2019 23:57 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1055

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1054

Key: ASCQM-17
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Mon, 27 May 2019 23:55 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1054

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1052

Key: ASCQM-16
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Mon, 27 May 2019 23:48 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1052

sAME
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1051

Key: ASCQM-15
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Mon, 27 May 2019 23:46 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1051

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1048

Key: ASCQM-14
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Mon, 27 May 2019 23:43 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1048

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1047

Key: ASCQM-13
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Mon, 27 May 2019 19:02 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1047

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1045

Key: ASCQM-12
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Mon, 27 May 2019 18:59 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1045

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1041

Key: ASCQM-11
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE consistency
Reported: ASCQM 1.0b1 — Mon, 27 May 2019 17:14 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1041

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-783

Key: ASCQM-10
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
edit description
Reported: ASCQM 1.0b1 — Mon, 27 May 2019 17:12 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
~~ASCQM-10~~

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1081

Key: ASCQM-9
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
Eliminate weakness
Reported: ASCQM 1.0b1 — Mon, 27 May 2019 17:10 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1081

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-1061

Key: ASCQM-8
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
Eliminate weakness
Reported: ASCQM 1.0b1 — Mon, 27 May 2019 17:06 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-1061

same
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-484

Key: ASCQM-7
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
edit description
Reported: ASCQM 1.0b1 — Mon, 27 May 2019 17:02 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-484

SAME
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-478

Key: ASCQM-6
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
edit description
Reported: ASCQM 1.0b1 — Mon, 27 May 2019 16:58 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-478

CWE consistency
Updated: Tue, 8 Oct 2019 17:50 GMT

CWE-407

Key: ASCQM-4
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
CWE description consistency
Reported: ASCQM 1.0b1 — Mon, 27 May 2019 00:55 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
CWE-407

same
Updated: Tue, 8 Oct 2019 17:50 GMT

Add 2 normative references

Key: ASCQM-1
Status: closed
Source: CAST Software ( Dr. Bill Curtis)
Summary:
AFP shoujld now be referenced as an ISO standard. CWEs should be referenced as an ITU standard.
Reported: ASCQM 1.0b1 — Mon, 27 May 2019 00:33 GMT
Disposition: Resolved — ASCQM 1.0
Disposition Summary:
Add 2 Normative references

Add references
Updated: Tue, 8 Oct 2019 17:50 GMT