PathixDataverse Forensics

← All 72 findings

Auditability & observability

A plugin that catches exceptions and hides the failure

Severity High / Medium / Low

What it is

Component catches exceptions without logging or rethrowing.

Why it matters

A plugin catch block that neither logs nor rethrows makes failures vanish with no trace. Read deterministically from the compiled IL; severity rises when the component writes a sensitive column.

Find it yourself

Only findable if you have the source. Search it for catch blocks whose body neither rethrows nor writes a trace line. Without source you cannot check this by hand at all, and the symptom is a process that appears to work while silently doing nothing.

How to fix it

Rethrow or trace the error before continuing; if swallowing is intended, say so in a trace line.

Related controls

SOC 2 CC7.2ISO 27001 A.8.15NIST AU-2 / SI-11

These mappings are indicative. Pathix detects a condition relevant to a control. It does not certify your compliance, and a finding is not an audit opinion. You stay responsible for your control environment.

Pathix checks this across every environment you scan, along with 71 other conditions. Self-hosted in your own Azure, read-only, metadata-only.

More in auditability & observability

← Back to all 72 findings

© 2026 Pathix L.L.C. · self-hosted · metadata-only
Not affiliated with Microsoft. Dynamics 365, Dataverse, and Power Platform are trademarks of Microsoft Corporation.π