952
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 684 Incorrect Provision of Specified Functionality 1505
ChildOf 755 Improper Handling of Exceptional Conditions 1576
Relevant to the view "Architectural Concepts" (CWE-1008)
Nature Type ID Name Page
MemberOf 1012 Cross Cutting 2427
Relevant to the view "CISQ Quality Measures (2020)" (CWE-1305)
Nature Type ID Name Page
ChildOf 703 Improper Check or Handling of Exceptional Conditions 1535
Relevant to the view "CISQ Data Protection Measures" (CWE-1340)
Nature Type ID Name Page
ChildOf 703 Improper Check or Handling of Exceptional Conditions 1535
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 389 Error Conditions, Return Values, Status Codes 2322
Weakness Ordinalities
Primary :
Resultant :
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Integrity
Other
Varies by Context
Unexpected State
Errors that are not properly reported could place the
system in an unexpected state that could lead to
unintended behaviors.
Demonstrative Examples
Example 1:
In the following snippet from a doPost() servlet method, the server returns "200 OK" (default) even
if an error occurs.
Example Language: Java (Bad)
try {
// Something that may throw an exception.
...
} catch (Throwable t) {
logger.error("Caught: " + t.toString());
return;
}
Observed Examples
CWE Version 4.14
CWE-393: Return of Wrong Status Code
CWE-393: Return of Wrong Status Code