This weakness occurs when software lacks a unified, consistent approach to managing errors across its codebase, leading to unpredictable security gaps and unreliable behavior.
When error handling is implemented ad-hoc—dealt with differently in each function or module—it creates a patchwork of responses. This inconsistency makes the system harder to debug and maintain, as errors can be silently ignored, improperly logged, or handled in ways that don't adequately protect the application's state. The root cause of failures often gets lost, making defects persistent and difficult to trace. Furthermore, inconsistent error management frequently leads to information leaks. Without a standardized mechanism controlling what details are shown, sensitive debug data, stack traces, or system information can be accidentally exposed to end-users. This provides attackers with valuable intelligence about the system's internal structure and potential points of failure, significantly increasing the risk of further exploitation.
Impact: Quality DegradationUnexpected StateVaries by Context