From cfeae770120c10a802856928b039959c32fd4bd9 Mon Sep 17 00:00:00 2001 From: tschmidtb51 <65305130+tschmidtb51@users.noreply.github.com> Date: Fri, 10 May 2024 23:19:20 +0200 Subject: [PATCH] chore(CWE): update CWE list to 4.14 --- lib/shared/cwec.js | 23 +++++++++++++++++++++-- 1 file changed, 21 insertions(+), 2 deletions(-) diff --git a/lib/shared/cwec.js b/lib/shared/cwec.js index feeb55f..81e6e8f 100644 --- a/lib/shared/cwec.js +++ b/lib/shared/cwec.js @@ -304,7 +304,7 @@ export default /** @type {const} */ ({ }, { id: 'CWE-1192', - name: 'System-on-Chip (SoC) Using Components without Unique, Immutable Identifiers', + name: 'Improper Identifier for IP Block used in System-On-Chip (SOC)', }, { id: 'CWE-1193', @@ -569,7 +569,10 @@ export default /** @type {const} */ ({ id: 'CWE-1301', name: 'Insufficient or Incomplete Data Removal within Hardware Component', }, - { id: 'CWE-1302', name: 'Missing Security Identifier' }, + { + id: 'CWE-1302', + name: 'Missing Source Identifier in Entity Transactions on a System-On-Chip (SOC)', + }, { id: 'CWE-1303', name: 'Non-Transparent Sharing of Microarchitectural Resources', @@ -715,6 +718,22 @@ export default /** @type {const} */ ({ }, { id: 'CWE-1419', name: 'Incorrect Initialization of Resource' }, { id: 'CWE-142', name: 'Improper Neutralization of Value Delimiters' }, + { + id: 'CWE-1420', + name: 'Exposure of Sensitive Information during Transient Execution', + }, + { + id: 'CWE-1421', + name: 'Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution', + }, + { + id: 'CWE-1422', + name: 'Exposure of Sensitive Information caused by Incorrect Data Forwarding during Transient Execution', + }, + { + id: 'CWE-1423', + name: 'Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution', + }, { id: 'CWE-143', name: 'Improper Neutralization of Record Delimiters' }, { id: 'CWE-144', name: 'Improper Neutralization of Line Delimiters' }, { id: 'CWE-145', name: 'Improper Neutralization of Section Delimiters' },