1257
The product does not use a standardized method for handling errors throughout the code, which
might introduce inconsistent error handling and resultant weaknesses.
Extended Description
If the product handles error messages individually, on a one-by-one basis, this is likely to result in
inconsistent error handling. The causes of errors may be lost. Also, detailed information about the
causes of an error may be unintentionally returned to the user.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 755 Improper Handling of Exceptional Conditions 1576
Relevant to the view "Architectural Concepts" (CWE-1008)
Nature Type ID Name Page
MemberOf 1012 Cross Cutting 2427
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 389 Error Conditions, Return Values, Status Codes 2322
Common Consequences
Scope Impact Likelihood
Integrity
Other
Quality Degradation
Unexpected State
Varies by Context
Potential Mitigations
Phase: Architecture and Design
define a strategy for handling errors of different severities, such as fatal errors versus basic log
events. Use or create built-in language features, or an external package, that provides an easyto-
use API and define coding standards for the detection and handling of errors.
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 746 CERT C Secure Coding Standard (2008) Chapter 13 -
Error Handling (ERR)
734 2350
MemberOf 880 CERT C++ Secure Coding Section 12 - Exceptions and
Error Handling (ERR)
868 2379
MemberOf 961 SFP Secondary Cluster: Incorrect Exception Behavior 888 2399
MemberOf 1405 Comprehensive Categorization: Improper Check or
Handling of Exceptional Conditions
1400 2531
Taxonomy Mappings
CWE Version 4.14
CWE-546: Suspicious Comment
CWE-546: Suspicious Comment