weakness

{
  "id": "MLC-T-CYB-004607",
  "term": "weakness",
  "field": "Cybersecurity",
  "definition": "1. An attribute or characteristic that may, under known or unknown conditions, render an entity, asset, system, network, or geographic area open to exploitation or susceptible to a given hazard.\n\n2. Defect or characteristic that may lead to undesirable behavior.\n\n3. (As used in this volume) Poor coding practices, as exemplified by CWEs\n\n4. A condition in a software, firmware, hardware, or service component that, under certain circumstances, could contribute to the introduction of vulnerabilities.\n\n5. A bug or fault type that can be exploited through an operation that results in a security-relevant error.",
  "references": [
    "CNSSI 4009-2022 from DHS Lexicon Terms and Definitions",
    "NIST SP 800-160v1r1 from ISO/SAE 21434:2021",
    "NISTIR 8011 Vol. 4",
    "NIST IR 8517 from MITRE CWE",
    "NIST IR 8517 from Bellay21",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/weakness/"
}