Detail Kategori CWE-389

CWE-389

Error Conditions, Return Values, Status Codes
2006-07-19 +00:00
Incomplete
2023-06-29 +00:00
CWE Mitre.org
Notifikasi untuk CWE tertentu
Tetap terinformasi tentang perubahan untuk CWE tertentu.
Kelola notifikasi

Nama: Error Conditions, Return Values, Status Codes

This category includes weaknesses that occur if a function does not generate the correct return/status code, or if the application does not handle all possible return/status codes that could be generated by a function. This type of problem is most often found in conditions that are rarely encountered during the normal operation of the product. Presumably, most bugs related to common conditions are found and eliminated during development and testing. In some cases, the attacker can directly control or influence the environment to trigger the rare conditions.

Daftar Anggota CWE

CWE-209: Generation of Error Message Containing Sensitive Information Dasar

CWE-248: Uncaught Exception Dasar

CWE-252: Unchecked Return Value Dasar

CWE-253: Incorrect Check of Function Return Value Dasar

CWE-390: Detection of Error Condition Without Action Dasar

CWE-391: DEPRECATED: Unchecked Error Condition Dasar

CWE-392: Missing Report of Error Condition Dasar

CWE-393: Return of Wrong Status Code Dasar

CWE-394: Unexpected Status Code or Return Value Dasar

CWE-395: Use of NullPointerException Catch to Detect NULL Pointer Dereference Dasar

CWE-396: Declaration of Catch for Generic Exception Dasar

CWE-397: Declaration of Throws for Generic Exception Dasar

CWE-544: Missing Standardized Error Handling Mechanism Dasar

CWE-584: Return Inside Finally Block Dasar

CWE-617: Reachable Assertion Dasar

CWE-756: Missing Custom Error Page Dasar

Informasi CWE

Catatan Pemetaan Kerentanan

Justifikasi : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
Komentar : See member weaknesses of this category.

Pengajuan

Nama Organisasi Tanggal Tanggal rilis Version
PLOVER 2006-07-19 +00:00 2006-07-19 +00:00 Draft 3

Modifikasi

Nama Organisasi Tanggal Komentar
CWE Content Team MITRE 2008-09-08 +00:00 updated Relationships, Other_Notes, Taxonomy_Mappings
CWE Content Team MITRE 2008-10-14 +00:00 updated Description
CWE Content Team MITRE 2009-12-28 +00:00 updated Other_Notes, Weakness_Ordinalities
CWE Content Team MITRE 2017-11-08 +00:00 updated Applicable_Platforms, Description, Other_Notes, References, Relationships, Research_Gaps, Taxonomy_Mappings, Weakness_Ordinalities
CWE Content Team MITRE 2019-06-20 +00:00 updated Relationships
CWE Content Team MITRE 2020-02-24 +00:00 updated Relationships
CWE Content Team MITRE 2023-04-27 +00:00 updated Mapping_Notes, Relationships
CWE Content Team MITRE 2023-06-29 +00:00 updated Mapping_Notes

Referensi

REF-44

24 Deadly Sins of Software Security
Michael Howard, David LeBlanc, John Viega.

Informasi yang disajikan di CVE Find berasal dari beberapa sumber referensi yang dipilih dengan cermat. Data CVE disediakan oleh MITRE Corporation dan National Vulnerability Database (NVD). Katalog Known Exploited Vulnerabilities (KEV) bersumber dari Cybersecurity and Infrastructure Security Agency (CISA), sementara skor EPSS berasal dari FIRST.org. Selain itu, data mengenai kelemahan perangkat lunak (CWE) dan pola serangan umum (CAPEC) dikelola oleh MITRE Corporation, dan informasi tentang konfigurasi perangkat keras dan perangkat lunak (CPE) disediakan oleh NVD.