CWE-1118
Insufficient Documentation of Error Handling Techniques
2019-01-03
00h00 +00:00
00h00 +00:00
Notifikasi untuk CWE tertentu
Tetap terinformasi tentang perubahan untuk CWE tertentu.
Nama: Insufficient Documentation of Error Handling Techniques
The documentation does not sufficiently describe the techniques
that are used for error handling, exception processing, or similar
mechanisms.
Informasi Umum
Mode Pengenalan
DocumentationPlatform yang Berlaku
Bahasa
Kelas: Not Language-Specific (Undetermined)Konsekuensi Umum
| Cakupan | Dampak | Kemungkinan |
|---|---|---|
| Other | Reduce Maintainability |
Mitigasi yang Memungkinkan
Phases : DocumentationDocumentation may need to cover error handling techniques at multiple layers, such as module, executable, compilable code unit, or callable.
Catatan Pemetaan Kerentanan
Justifikasi : This entry is primarily a quality issue with no direct security implications.Komentar : Look for weaknesses that are focused specifically on insecure behaviors that have more direct security implications.
Referensi
REF-963
Providing a Framework for Effective Software Quality AssessmentRobert A. Martin, Lawrence H. Shafer.
https://www.researchgate.net/publication/285403022_PROVIDING_A_FRAMEWORK_FOR_EFFECTIVE_SOFTWARE_QUALITY_MEASUREMENT_MAKING_A_SCIENCE_OF_RISK_ASSESSMENT
Pengajuan
| Nama | Organisasi | Tanggal | Tanggal rilis | Version |
|---|---|---|---|---|
| CWE Content Team | MITRE | 3.2 |
Modifikasi
| Nama | Organisasi | Tanggal | Komentar |
|---|---|---|---|
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated Applicable_Platforms, Common_Consequences, Time_of_Introduction | |
| CWE Content Team | MITRE | updated Description, Potential_Mitigations |
