1. Home
  2. CWE Database
  3. CWE-1097
Base · Medium

CWE-1097: Persistent Storable Data Element without Associated Comparison Control Element

The product uses a storable data element that does not have all of the associated functions or methods that are necessary to support comparison.

CWE-1097 · Base Level

Description

The product uses a storable data element that does not have all of the associated functions or methods that are necessary to support comparison.

Potential Impact

Other

Reduce Reliability

CWE-1076: Insufficient Adherence to Expected Conventions

The product's architecture, source code, design, documentation, or other artifact does not follow required conventi...

CWE-595: Comparison of Object References Instead of Object Contents

The product compares object references instead of the contents of the objects themselves, preventing it from detecting e...

Taxonomy Mappings

  • OMG ASCRM: ASCRM-RLB-4 —

Frequently Asked Questions

What is CWE-1097?

CWE-1097 (Persistent Storable Data Element without Associated Comparison Control Element) is a software weakness identified by MITRE's Common Weakness Enumeration. It is classified as a Base-level weakness. The product uses a storable data element that does not have all of the associated functions or methods that are necessary to support comparison.

How can CWE-1097 be exploited?

Attackers can exploit CWE-1097 (Persistent Storable Data Element without Associated Comparison Control Element) to reduce reliability. This weakness is typically introduced during the Implementation phase of software development.

How do I prevent CWE-1097?

Follow secure coding practices, conduct code reviews, and use automated security testing tools (SAST/DAST) to detect this weakness early in the development lifecycle.

What is the severity of CWE-1097?

CWE-1097 is classified as a Base-level weakness (Medium abstraction). Its actual severity depends on the specific context and how the weakness manifests in your application.