Catching overly broad exceptions promotes complex error handling code that is more likely to contain security vulnerabilities.
Potential Impact
Non-Repudiation: Hide Activities
Detection Methods
Automated Static Analysis: Automated static analysis, commonly referred to as Static Application Security Testing (SAST), can find some instances of this weakness by analyzing source code (or binary/compiled code) without havin...