https://cwe.mitre.org/community/submissions/guidelines.html
Indicates the point (or points) in the development life cycle during which the weakness may be introduced. The Phase can cover one or more of: Policy, Requirements, Architecture and Design, Implementation, Build and Compilation, Testing, Documentation, Bundling, Distribution, Installation, System Configuration, Operation, Patching and Maintenance, and Porting. Where are these defined? Is it entries like this? https://cwe.mitre.org/data/definitions/16.html Which doesn't really even have a definition per se. -- Kurt Seifried (He/Him) [email protected]
