COMMON WEAKNESS ENUMERATIONDraft

CWE-392

Missing Report of Error Condition

The product encounters an error but does not provide a status code or return value to indicate that an error has occurred.

Soyutlama

Base

Yapı

Simple

Sömürü İhtimali

Medium

Problemi anla

Problem nedir?

The product encounters an error but does not provide a status code or return value to indicate that an error has occurred.

Kök neden

Problem nasıl ve ne zaman oluşur?

Yaşam döngüsü evresi

Implementation

Risk

Başarılı sömürü neye yol açar?

Varies by ContextUnexpected State

Etkilenen güvenlik alanları: Integrity, Other

Errors that are not properly reported could place the system in an unexpected state that could lead to unintended behaviors.

Savunma

Nasıl önlenir ve çözülür?

  • Follow secure coding guidelines for input handling and boundary checking.
  • Enforce strict security reviews and automated static analysis (SAST) checks.