CWE-431: Missing Handler
Description
A handler is not available or implemented.
When an exception is thrown and not caught, the process has given up an opportunity to decide if a given failure or event is worth a change in execution.
- Abstraction
- BaseA weakness specific enough to point to detection and prevention methods.
- Likelihood of exploit
- Not rated by MITRE
- Status
- Draft
Common consequences
- Other
Varies by Context
Potential mitigations
- Implementation
Handle all possible situations (e.g. error condition).
- Implementation
If an operation can throw an Exception, implement a handler for that specific exception.
Related weaknesses
Parent weaknesses
Can lead to
CAPEC attack patterns that exploit it
CWE 4.20 links no CAPEC attack pattern to this weakness.