이름: Error Conditions, Return Values, Status Codes

This category includes weaknesses that occur if a function does not generate the correct return/status code, or if the application does not handle all possible return/status codes that could be generated by a function. This type of problem is most often found in conditions that are rarely encountered during the normal operation of the product. Presumably, most bugs related to common conditions are found and eliminated during development and testing. In some cases, the attacker can directly control or influence the environment to trigger the rare conditions.

CWE 구성원 목록

CWE-209: Generation of Error Message Containing Sensitive Information 기본

CWE-248: Uncaught Exception 기본

CWE-252: Unchecked Return Value 기본

CWE-253: Incorrect Check of Function Return Value 기본

CWE-390: Detection of Error Condition Without Action 기본

CWE-391: DEPRECATED: Unchecked Error Condition 기본

CWE-392: Missing Report of Error Condition 기본

CWE-393: Return of Wrong Status Code 기본

CWE-394: Unexpected Status Code or Return Value 기본

CWE-395: Use of NullPointerException Catch to Detect NULL Pointer Dereference 기본

CWE-396: Declaration of Catch for Generic Exception 기본

CWE-397: Declaration of Throws for Generic Exception 기본

CWE-544: Missing Standardized Error Handling Mechanism 기본

CWE-584: Return Inside Finally Block 기본

CWE-617: Reachable Assertion 기본

CWE-756: Missing Custom Error Page 기본

CWE 정보

취약점 매핑 메모

근거 : This entry is a Category. Using categories for mapping has been discouraged since 2019. Categories are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.
댓글 : See member weaknesses of this category.

제출

이름	조직	날짜	출시일	Version
PLOVER		2006-07-19 +00:00	2006-07-19 +00:00	Draft 3

수정 사항

이름	조직	날짜	댓글
CWE Content Team	MITRE	2008-09-08 +00:00	updated Relationships, Other_Notes, Taxonomy_Mappings
CWE Content Team	MITRE	2008-10-14 +00:00	updated Description
CWE Content Team	MITRE	2009-12-28 +00:00	updated Other_Notes, Weakness_Ordinalities
CWE Content Team	MITRE	2017-11-08 +00:00	updated Applicable_Platforms, Description, Other_Notes, References, Relationships, Research_Gaps, Taxonomy_Mappings, Weakness_Ordinalities
CWE Content Team	MITRE	2019-06-20 +00:00	updated Relationships
CWE Content Team	MITRE	2020-02-24 +00:00	updated Relationships
CWE Content Team	MITRE	2023-04-27 +00:00	updated Mapping_Notes, Relationships
CWE Content Team	MITRE	2023-06-29 +00:00	updated Mapping_Notes

참고 자료

REF-44

24 Deadly Sins of Software Security
Michael Howard, David LeBlanc, John Viega.

CWE-389 카테고리 상세 정보

CWE-389