CWE-1118
Insufficient Documentation of Error Handling Techniques
2019-01-03
00h00 +00:00
00h00 +00:00
指定 CWE 通知
掌握特定 CWE 的任何變更。
名稱: Insufficient Documentation of Error Handling Techniques
The documentation does not sufficiently describe the techniques
that are used for error handling, exception processing, or similar
mechanisms.
一般資訊
引入方式
Documentation適用平台
程式語言
類別： Not Language-Specific (Undetermined)常見後果
| 範圍 | 影響 | 可能性 |
|---|---|---|
| Other | Reduce Maintainability |
潛在緩解措施
Phases : DocumentationDocumentation may need to cover error handling techniques at multiple layers, such as module, executable, compilable code unit, or callable.
漏洞對應備注
理由說明 : This entry is primarily a quality issue with no direct security implications.備註 : Look for weaknesses that are focused specifically on insecure behaviors that have more direct security implications.
參考資料
REF-963
Providing a Framework for Effective Software Quality AssessmentRobert A. Martin, Lawrence H. Shafer.
https://www.researchgate.net/publication/285403022_PROVIDING_A_FRAMEWORK_FOR_EFFECTIVE_SOFTWARE_QUALITY_MEASUREMENT_MAKING_A_SCIENCE_OF_RISK_ASSESSMENT
提交
| 名稱 | 機構 | 日期 | 發布日期 | Version |
|---|---|---|---|---|
| CWE Content Team | MITRE | 3.2 |
修改記錄
| 名稱 | 機構 | 日期 | 備註 |
|---|---|---|---|
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Relationships | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated Mapping_Notes | |
| CWE Content Team | MITRE | updated Applicable_Platforms, Common_Consequences, Time_of_Introduction | |
| CWE Content Team | MITRE | updated Description, Potential_Mitigations |
