Merge pull request #166 from secvisogram/chore/cwe

chore(CWE): update CWE list to 4.14
secvisogram · May 22, 2024 · af99c11 · af99c11
2 parents c08691e + cfeae77
commit af99c11
Showing 1 changed file with 21 additions and 2 deletions.
diff --git a/lib/shared/cwec.js b/lib/shared/cwec.js
@@ -304,7 +304,7 @@ export default /** @type {const} */ ({
     },
     {
       id: 'CWE-1192',
-      name: 'System-on-Chip (SoC) Using Components without Unique, Immutable Identifiers',
+      name: 'Improper Identifier for IP Block used in System-On-Chip (SOC)',
     },
     {
       id: 'CWE-1193',
@@ -569,7 +569,10 @@ export default /** @type {const} */ ({
       id: 'CWE-1301',
       name: 'Insufficient or Incomplete Data Removal within Hardware Component',
     },
-    { id: 'CWE-1302', name: 'Missing Security Identifier' },
+    {
+      id: 'CWE-1302',
+      name: 'Missing Source Identifier in Entity Transactions on a System-On-Chip (SOC)',
+    },
     {
       id: 'CWE-1303',
       name: 'Non-Transparent Sharing of Microarchitectural Resources',
@@ -715,6 +718,22 @@ export default /** @type {const} */ ({
     },
     { id: 'CWE-1419', name: 'Incorrect Initialization of Resource' },
     { id: 'CWE-142', name: 'Improper Neutralization of Value Delimiters' },
+    {
+      id: 'CWE-1420',
+      name: 'Exposure of Sensitive Information during Transient Execution',
+    },
+    {
+      id: 'CWE-1421',
+      name: 'Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution',
+    },
+    {
+      id: 'CWE-1422',
+      name: 'Exposure of Sensitive Information caused by Incorrect Data Forwarding during Transient Execution',
+    },
+    {
+      id: 'CWE-1423',
+      name: 'Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution',
+    },
     { id: 'CWE-143', name: 'Improper Neutralization of Record Delimiters' },
     { id: 'CWE-144', name: 'Improper Neutralization of Line Delimiters' },
     { id: 'CWE-145', name: 'Improper Neutralization of Section Delimiters' },