COMMON WEAKNESS ENUMERATIONDraft

CWE-431

Missing Handler

A handler is not available or implemented.

Abstraction

Base

Structure

Simple

Likelihood of Exploit

Medium

Understand the problem

What is the problem?

A handler is not available or implemented.

Extended description

When an exception is thrown and not caught, the process has given up an opportunity to decide if a given failure or event is worth a change in execution.

Root cause

How and when does the problem arise?

Lifecycle phase

Implementation

Risk

What does successful exploitation lead to?

Varies by Context

Affected security scopes: Other

Defence

How is it prevented and fixed?

Implementation

Implementation-phase defence

Detail
Handle all possible situations (e.g. error condition).

Implementation

Implementation-phase defence

Detail
If an operation can throw an Exception, implement a handler for that specific exception.